PT-2008-6580 · Washington University · C-Client Library+1
Ludwig Nussel
·
Publicado
2008-12-23
·
Atualizado
2017-08-08
·
CVE-2008-5514
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
UW IMAP toolkit versions prior to 2007e
c-client library (affected versions not specified)
Description
The issue is caused by an off-by-one error in the
rfc822 output char function within the RFC822BUFFER routines. This error can lead to a buffer overflow when processing a specially crafted e-mail message, resulting in a denial of service (crash). The problem is context-dependent, meaning the attack's success depends on specific conditions.Recommendations
For UW IMAP toolkit versions prior to 2007e, update to version 2007e or later to resolve the issue.
For the c-client library, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Uw Imap Toolkit
C-Client Library