• info
• discussion
• exploit
• solution
• references

Dovecot IMAP Server Mapped Pages Off-By-One Buffer Overflow Vulnerability

Solution:
The vendor has released a fix for this issue; please see the references for more information.


Dovecot Dovecot 1.0.RC10

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0 Beta8

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.RC11

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.RC4

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.RC5

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.RC8

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.Beta2

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.RC13

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Redhat Fedora Core5

• RedHat dovecot-1.0-0.beta8.3.fc5.i386.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat dovecot-1.0-0.beta8.3.fc5.ppc.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat dovecot-1.0-0.beta8.3.fc5.src.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat dovecot-1.0-0.beta8.3.fc5.x86_64.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat dovecot-debuginfo-1.0-0.beta8.3.fc5.i386.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat dovecot-debuginfo-1.0-0.beta8.3.fc5.ppc.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/


• RedHat dovecot-debuginfo-1.0-0.beta8.3.fc5.x86_64.rpm
  Fedora Core 5
  http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/

Dovecot Dovecot 1.0.RC14

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.RC2

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz


• Ubuntu dovecot-common_1.0.beta3-3ubuntu5.4_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.beta3-3ubuntu5.4_amd64.deb


• Ubuntu dovecot-common_1.0.beta3-3ubuntu5.4_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.beta3-3ubuntu5.4_i386.deb


• Ubuntu dovecot-common_1.0.beta3-3ubuntu5.4_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.beta3-3ubuntu5.4_powerpc.deb


• Ubuntu dovecot-common_1.0.beta3-3ubuntu5.4_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.beta3-3ubuntu5.4_sparc.deb


• Ubuntu dovecot-common_1.0.rc2-1ubuntu2.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.rc2-1ubuntu2.1_amd64.deb


• Ubuntu dovecot-common_1.0.rc2-1ubuntu2.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.rc2-1ubuntu2.1_i386.deb


• Ubuntu dovecot-common_1.0.rc2-1ubuntu2.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.rc2-1ubuntu2.1_powerpc.deb


• Ubuntu dovecot-common_1.0.rc2-1ubuntu2.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-common_1 .0.rc2-1ubuntu2.1_sparc.deb


• Ubuntu dovecot-imapd_1.0.beta3-3ubuntu5.4_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.beta3-3ubuntu5.4_amd64.deb


• Ubuntu dovecot-imapd_1.0.beta3-3ubuntu5.4_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.beta3-3ubuntu5.4_i386.deb


• Ubuntu dovecot-imapd_1.0.beta3-3ubuntu5.4_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.beta3-3ubuntu5.4_powerpc.deb


• Ubuntu dovecot-imapd_1.0.beta3-3ubuntu5.4_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.beta3-3ubuntu5.4_sparc.deb


• Ubuntu dovecot-imapd_1.0.rc2-1ubuntu2.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.rc2-1ubuntu2.1_amd64.deb


• Ubuntu dovecot-imapd_1.0.rc2-1ubuntu2.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.rc2-1ubuntu2.1_i386.deb


• Ubuntu dovecot-imapd_1.0.rc2-1ubuntu2.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.rc2-1ubuntu2.1_powerpc.deb


• Ubuntu dovecot-imapd_1.0.rc2-1ubuntu2.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-imapd_1. 0.rc2-1ubuntu2.1_sparc.deb


• Ubuntu dovecot-pop3d_1.0.beta3-3ubuntu5.4_amd64.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.beta3-3ubuntu5.4_amd64.deb


• Ubuntu dovecot-pop3d_1.0.beta3-3ubuntu5.4_i386.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.beta3-3ubuntu5.4_i386.deb


• Ubuntu dovecot-pop3d_1.0.beta3-3ubuntu5.4_powerpc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.beta3-3ubuntu5.4_powerpc.deb


• Ubuntu dovecot-pop3d_1.0.beta3-3ubuntu5.4_sparc.deb
  Ubuntu 6.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.beta3-3ubuntu5.4_sparc.deb


• Ubuntu dovecot-pop3d_1.0.rc2-1ubuntu2.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.rc2-1ubuntu2.1_amd64.deb


• Ubuntu dovecot-pop3d_1.0.rc2-1ubuntu2.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.rc2-1ubuntu2.1_i386.deb


• Ubuntu dovecot-pop3d_1.0.rc2-1ubuntu2.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.rc2-1ubuntu2.1_powerpc.deb


• Ubuntu dovecot-pop3d_1.0.rc2-1ubuntu2.1_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/d/dovecot/dovecot-pop3d_1. 0.rc2-1ubuntu2.1_sparc.deb

Dovecot Dovecot 1.0 Rc1

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.RC3

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.RC7

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.RC6

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0 Beta7

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.RC9

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.Beta3

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz

Dovecot Dovecot 1.0.RC12

• Dovecot file-cache-buffer-overflow-fix.diff
  http://dovecot.org/patches/1.0/file-cache-buffer-overflow-fix.diff


• Dovecot dovecot-1.0.rc15.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.rc15.tar.gz