CVE-2011-1929

Published: May 24, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted e-mail message.

Affected (31)

Products: Dovecot: Dovecot

1 product

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Dovecot Dovecot	Version 1.2.0
Dovecot Dovecot	Version 1.2.10
Dovecot Dovecot	Version 1.2.11
Dovecot Dovecot	Version 1.2.12
Dovecot Dovecot	Version 1.2.13
Dovecot Dovecot	Version 1.2.14
Dovecot Dovecot	Version 1.2.15
Dovecot Dovecot	Version 1.2.16
Dovecot Dovecot	Version 1.2.1
Dovecot Dovecot	Version 1.2.2
Dovecot Dovecot	Version 1.2.3
Dovecot Dovecot	Version 1.2.4
Dovecot Dovecot	Version 1.2.5
Dovecot Dovecot	Version 1.2.6
Dovecot Dovecot	Version 1.2.7
Dovecot Dovecot	Version 1.2.8
Dovecot Dovecot	Version 1.2.9

Configuration B

14 vulnerable

Vulnerable Software	Affected Versions
Dovecot Dovecot	Version 2.0.0
Dovecot Dovecot	Version 2.0.10
Dovecot Dovecot	Version 2.0.11
Dovecot Dovecot	Version 2.0.12
Dovecot Dovecot	Version 2.0.1
Dovecot Dovecot	Version 2.0.2
Dovecot Dovecot	Version 2.0.3
Dovecot Dovecot	Version 2.0.4
Dovecot Dovecot	Version 2.0.5
Dovecot Dovecot	Version 2.0.6
Dovecot Dovecot	Version 2.0.7
Dovecot Dovecot	Version 2.0.8
Dovecot Dovecot	Version 2.0.9
Dovecot Dovecot	Version 2.0 beta1

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (50)

http://dovecot.org/pipermail/dovecot/2011-May/059085.html

Source: secalert@redhat.com

Patch

http://dovecot.org/pipermail/dovecot/2011-May/059086.html

Source: secalert@redhat.com

Patch

http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c

Source: secalert@redhat.com

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2011/05/18/4

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2011/05/19/3

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2011/05/19/6

Source: secalert@redhat.com

Patch

http://osvdb.org/72495

Source: secalert@redhat.com

http://secunia.com/advisories/44683

Source: secalert@redhat.com

http://secunia.com/advisories/44712

Source: secalert@redhat.com

http://secunia.com/advisories/44756

Source: secalert@redhat.com

http://secunia.com/advisories/44771

Source: secalert@redhat.com

http://secunia.com/advisories/44827

Source: secalert@redhat.com

http://www.debian.org/security/2011/dsa-2252

Source: secalert@redhat.com

http://www.dovecot.org/doc/NEWS-1.2

Source: secalert@redhat.com

http://www.dovecot.org/doc/NEWS-2.0

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2011:101

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2011-1187.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/47930

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1143-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=706286

Source: secalert@redhat.com

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/67589

Source: secalert@redhat.com

https://hermes.opensuse.org/messages/8581790

Source: secalert@redhat.com

http://dovecot.org/pipermail/dovecot/2011-May/059085.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://dovecot.org/pipermail/dovecot/2011-May/059086.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://hg.dovecot.org/dovecot-1.1/rev/3698dfe0f21c

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061384.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060815.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/060825.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2011/05/18/4

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2011/05/19/3

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2011/05/19/6

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://osvdb.org/72495

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44683

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44712

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44756

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44771

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/44827

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2011/dsa-2252

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.dovecot.org/doc/NEWS-1.2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.dovecot.org/doc/NEWS-2.0

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2011:101

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2011-1187.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/47930

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1143-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=706286

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/67589

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/8581790

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.