Red Hat Security AdvisoryRHSA-2011:1187
dovecot security update
Released 2011-08-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) dovecot-1.0.7-7.el5_7.1, dovecot-1.0.7-7.el5_7.1.i386
- Red Hat Enterprise Linux (v. 5 server) dovecot-1.0.7-7.el5_7.1, dovecot-1.0.7-7.el5_7.1.i386, dovecot-1.0.7-7.el5_7.1.ia64 +1
- Red Hat Enterprise Linux AS version 4 dovecot-0.99.11-10.EL4, dovecot-0.99.11-10.EL4.i386, dovecot-0.99.11-10.EL4.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 dovecot-0.99.11-10.EL4, dovecot-0.99.11-10.EL4.i386
- Red Hat Enterprise Linux ES version 4 dovecot-0.99.11-10.EL4, dovecot-0.99.11-10.EL4.i386, dovecot-0.99.11-10.EL4.ia64
- Red Hat Enterprise Linux Server (v. 6) dovecot-1:2.0.9-2.el6_1.1, dovecot-1:2.0.9-2.el6_1.1.ppc, dovecot-mysql-1:2.0.9-2.el6_1.1 +2
- Red Hat Enterprise Linux Server Optional (v. 6) dovecot-1:2.0.9-2.el6_1.1, dovecot-devel-1:2.0.9-2.el6_1.1
- Red Hat Enterprise Linux WS version 4 dovecot-0.99.11-10.EL4, dovecot-0.99.11-10.EL4.i386, dovecot-0.99.11-10.EL4.ia64
Fixes 1 record
Priority LOW 29
lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle '\0' characters in header names, which allows remote attackers to cause a denial of service (daemon crash o…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0325 · Published 2011-05-24 · Fixed CWE-20
