CVE-2006-5973

Ubuntu Security Notice 387-1

Severity Score

6.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.

Desbordamiento de búfer (off-by-one) en Dovecot 1.0test53 hasta 1.0.rc14, y posiblemente otras versiones, cuando se utilizan los archivos de índice y mmap_disable tiene el valor "Sí", permite a usuarios IMAP o POP3 remotos autenticados provocar una denegación de servicio (caída) a través de vectores no especificados relacionados con el archivo de caché.

Dovecot was discovered to have an error when handling its index cache files. This error could be exploited by authenticated POP and IMAP users to cause a crash of the Dovecot server, or possibly to execute arbitrary code. Only servers using the non-default option "mmap_disable=yes" were vulnerable.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-11-20 CVE Reserved
2006-11-20 CVE Published
2024-08-07 CVE Updated
2025-07-09 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (14)

URL	Tag	Source
http://dovecot.org/list/dovecot-news/2006-November/000023.html	Mailing List
http://secunia.com/advisories/23150	Third Party Advisory
http://secunia.com/advisories/23172	Third Party Advisory
http://secunia.com/advisories/23213	Third Party Advisory
http://securitytracker.com/id?1017288	Vdb Entry
http://www.securityfocus.com/archive/1/452081/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/21183/info	Vdb Entry
http://www.vupen.com/english/advisories/2006/4614	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/30433	Vdb Entry
https://issues.rpath.com/browse/RPL-802	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC
http://dovecot.org/pipermail/dovecot-news/2006-November/000024.html	2018-10-17

URL	Date	SRC
http://secunia.com/advisories/23007	2018-10-17
http://www.novell.com/linux/security/advisories/2006_73_mono.html	2018-10-17
http://www.ubuntu.com/usn/usn-387-1	2018-10-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.alpha1 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.alpha1"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.alpha2 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.alpha2"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.alpha3 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.alpha3"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.alpha4 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.alpha4"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.alpha5 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.alpha5"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta1 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta1"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta2 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta2"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta3 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta3"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta4 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta4"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta5 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta5"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta6 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta6"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta7 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta7"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta8 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta8"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta9 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta9"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc1 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc1"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc2 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc2"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc3 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc3"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc4 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc4"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc5 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc5"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc6 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc6"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc7 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc7"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc8 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc8"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc9 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc9"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc10 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc10"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc11 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc11"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc12 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc12"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc13 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc13"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc14 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc14"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test53 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test53"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test54 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test54"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test55 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test55"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test56 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test56"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test57 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test57"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test58 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test58"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test59 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test59"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test60 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test60"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test61 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test61"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test62 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test62"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test63 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test63"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test64 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test64"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test65 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test65"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test66 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test66"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test67 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test67"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test68 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test68"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test69 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test69"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test70 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test70"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test71 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test71"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test72 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test72"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test73 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test73"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test74 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test74"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test75 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test75"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test76 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test76"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test77 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test77"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test78 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test78"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test79 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test79"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test80 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test80"		-		Affected