source: http://www.securityfocus.com/bid/31997/info Dovecot is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted email headers. An attacker can exploit this issue to prevent recipients from accessing their mailboxes. For an exploit to succeed, the IMAP client connecting to Dovecot must use the FETCH ENVELOPE command. The issue affects Dovecot 1.1.4 and 1.1.5. The following invalid message address header is sufficient to trigger this issue: "From: ("
Related ExploitsTrying to match CVEs (1): CVE-2008-4907
Trying to match OSVDBs (1): 49429
Other Possible E-DB Search Terms: Dovecot 1.1.x, Dovecot
|2008-03-14||5257||Dovecot IMAP 1.0.10 <= 1.1rc2 - Remote Email Disclosure||kingcope|
|2013-05-07||25297||Dovecot with Exim - sender_address Parameter Remote Command Execution||RedTeam Pentesting GmbH|