• info
• discussion
• exploit
• solution
• references

Dovecot IMAP Server Mapped Pages Off-By-One Buffer Overflow Vulnerability

Dovecot is prone to an off-by-one buffer-overflow condition due to an error that results in insufficient memory allocation.

An attacker may exploit this issue to trigger denial-of-service conditions. Presumably, arbitrary code execution may be possible as well.

Versions 1.0test53 to 1.0.rc14 are vulnerable.