NVD

Id
4696  
Name
CVE-2008-4907  
Description
The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service (persistent crash) via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsing bug."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-11-03  
Modified Date
2009-01-23  
Seq
2008-4907  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
29377 4696 CVE-2008-4907 GLSA-200812-16  View
29378 4696 CVE-2008-4907 [Dovecot-news] 20081030 v1.1.6 released  View
29379 4696 CVE-2008-4907 31997  View
29380 4696 CVE-2008-4907 USN-666-1  View
29381 4696 CVE-2008-4907 dovecot-mail-header-dos(46227)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47011 JVNDB-2008-002321 Dovecot のメッセージ構文解析機能におけるサービス運用妨害 (DoS) の脆弱性 Dovecot のメッセージ構文解析機能には、IMAP クライアントの FETCH ENVELOPE コマンドを利用している場合、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-4907 35020 CVE-2008-4907 4696 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002321.html 2008-11-04 2009-07-08 View