CVE-2008-3676

Published: Aug 14, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated users to cause a denial of service (resource exhaustion or daemon crash) via a long series of IMAP commands.

Affected (1)

Products: Hmailserver: Hmailserver

Hmailserver

1 product

Hmailserver

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hmailserver Hmailserver	Version 4.4.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (12)

http://secunia.com/advisories/31480

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/4155

Source: cve@mitre.org

http://www.hmailserver.com/documentation/?page=changelog

Source: cve@mitre.org

Patch

http://www.securityfocus.com/archive/1/495361/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/30663

Source: cve@mitre.org

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/44429

Source: cve@mitre.org

http://secunia.com/advisories/31480