CVE-2006-5973

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.

Desbordamiento de búfer (off-by-one) en Dovecot 1.0test53 hasta 1.0.rc14, y posiblemente otras versiones, cuando se utilizan los archivos de índice y mmap_disable tiene el valor "Sí", permite a usuarios IMAP o POP3 remotos autenticados provocar una denegación de servicio (caída) a través de vectores no especificados relacionados con el archivo de caché.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-11-20 CVE Reserved
2006-11-20 CVE Published
2024-01-16 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (14)

URL	Tag	Source
http://dovecot.org/list/dovecot-news/2006-November/000023.html	Mailing List
http://secunia.com/advisories/23150	Third Party Advisory
http://secunia.com/advisories/23172	Third Party Advisory
http://secunia.com/advisories/23213	Third Party Advisory
http://securitytracker.com/id?1017288	Vdb Entry
http://www.securityfocus.com/archive/1/452081/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/21183/info	Vdb Entry
http://www.vupen.com/english/advisories/2006/4614	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/30433	Vdb Entry
https://issues.rpath.com/browse/RPL-802	X_refsource_confirm

URL	Date	SRC

URL	Date	SRC
http://dovecot.org/pipermail/dovecot-news/2006-November/000024.html	2018-10-17

URL	Date	SRC
http://secunia.com/advisories/23007	2018-10-17
http://www.novell.com/linux/security/advisories/2006_73_mono.html	2018-10-17
http://www.ubuntu.com/usn/usn-387-1	2018-10-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.alpha1 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.alpha1"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.alpha2 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.alpha2"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.alpha3 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.alpha3"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.alpha4 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.alpha4"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.alpha5 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.alpha5"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta1 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta1"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta2 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta2"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta3 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta3"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta4 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta4"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta5 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta5"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta6 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta6"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta7 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta7"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta8 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta8"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.beta9 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.beta9"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc1 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc1"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc2 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc2"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc3 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc3"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc4 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc4"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc5 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc5"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc6 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc6"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc7 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc7"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc8 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc8"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc9 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc9"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc10 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc10"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc11 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc11"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc12 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc12"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc13 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc13"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.rc14 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.rc14"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test53 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test53"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test54 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test54"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test55 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test55"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test56 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test56"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test57 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test57"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test58 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test58"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test59 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test59"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test60 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test60"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test61 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test61"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test62 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test62"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test63 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test63"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test64 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test64"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test65 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test65"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test66 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test66"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test67 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test67"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test68 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test68"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test69 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test69"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test70 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test70"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test71 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test71"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test72 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test72"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test73 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test73"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test74 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test74"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test75 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test75"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test76 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test76"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test77 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test77"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test78 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test78"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test79 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test79"		-		Affected
Timo Sirainen Search vendor "Timo Sirainen"		Dovecot Search vendor "Timo Sirainen" for product "Dovecot"				1.0.test80 Search vendor "Timo Sirainen" for product "Dovecot" and version "1.0.test80"		-		Affected