Vulnerability Details : CVE-2006-0730
Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) "potential hangs" in the APPEND command and "potential crashes" in (2) dovecot-auth and (3) imap/pop3-login. NOTE: vector 2 might be related to a double free vulnerability.
Vulnerability category: OverflowMemory CorruptionDenial of service
Products affected by CVE-2006-0730
- cpe:2.3:a:timo_sirainen:dovecot:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-0730
1.83%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 87 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-0730
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2006-0730
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
Vendor statements for CVE-2006-0730
-
Red Hat 2006-08-16This issue only affected Dovecot versions 1.0beta1 and 1.0beta2. Red Hat Enterprise Linux 4 shipped with an earlier version of Dovecot and is therefore not vulnerable to this issue.
References for CVE-2006-0730
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/24709
Dovecot APPEND command denial of service CVE-2006-0730 Vulnerability Report
-
http://www.securityfocus.com/bid/16672
-
http://www.dovecot.org/list/dovecot/2006-February/011367.html
[Dovecot] 1.0beta3 released
-
http://www.vupen.com/english/advisories/2006/0549
Site en constructionVendor Advisory
Jump to