PT-1997-1210 · Imap · Imap

Published 1997-10-08 · Updated 2017-12-19 · CVE-1999-1224

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions IMAP versions 4.1 BETA and possibly other versions

Description The issue arises from improper handling of the SIGABRT (abort) signal, allowing local users to crash the server via specific command sequences, resulting in a core dump that may contain sensitive password information.

Recommendations For version 4.1 BETA, consider implementing signal handling to prevent server crashes until a proper fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1224

Affected Products

Imap

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1224 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/349 · Note
• http://marc.info/?l=bugtraq&m=87635124302928&w=2 · Note