PT-1997-1210 · Imap · Imap

Publicado 1997-10-08 · Atualizado 2017-12-19 · CVE-1999-1224

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions IMAP versions 4.1 BETA and possibly other versions

Description The issue arises from improper handling of the SIGABRT (abort) signal, allowing local users to crash the server via specific command sequences, resulting in a core dump that may contain sensitive password information.

Recommendations For version 4.1 BETA, consider implementing signal handling to prevent server crashes until a proper fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1224

Produtos afetados

Imap

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/349 · Nota
• http://marc.info/?l=bugtraq&m=87635124302928&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1224 · Nota de Segurança