Vulnerability Name: | CCN-80453 | ||||||
Published: | 2012-11-29 | ||||||
Updated: | 2012-11-29 | ||||||
Summary: | Dovecot is vulnerable to a denial of service, caused by an error in mail-search.c when SEARCH contained multiple KEYWORD parameters. A remote attacker could exploit this vulnerability to cause the application to crash. | ||||||
CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||
CVSS v2 Severity: | 5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P) 3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
| ||||||
Vulnerability Consequences: | Denial of Service | ||||||
References: | Source: CCN Type: SA51455 Dovecot IMAP Multiple Keyword Search Denial Of Service Vulnerability Source: CCN Type: Dovecot Web Site v2.1.11 released Source: XF Type: UNKNOWN dovecot-mailsearch-dos(80453) | ||||||
Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
BACK |