Dovecot Sieve Plugin Multiple Buffer Overflow Vulnerabilities

  1. Network Vulnerabilities
  2. Buffer overflow
  3. Dovecot Sieve Plugin Multiple Buffer Overflow Vulnerabilities
Summary
This host has Dovecot Sieve Plugin installed and is prone to multiple Buffer Overflow Vulnerabilities
Impact
Successful attack could allow malicious people to crash an affected application or execute arbitrary code. Impact Level: Application
Solution
Apply the patch or upgrade to Dovecot version 1.1.4 or 1.1.7 http://www.dovecot.org/download.html http://hg.dovecot.org/dovecot-sieve-1.1/rev/049f22520628 http://hg.dovecot.org/dovecot-sieve-1.1/rev/4577c4e1130d ***** NOTE: Ignore this warning, if above mentioned patch is already applied. *****
Insight
Multiple buffer overflow errors in the CMU libsieve when processing malicious SIEVE scripts.
Affected
Dovecot versions 1.0 before 1.0.4 and 1.1 before 1.1.7
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities