CVE-2008-4907

The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of…

published November 4, 2008

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service (persistent crash) via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsing bug."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06203 · 93.5th percentile
Published
2008-11-04T00:00Z
EPSS history
Timeline
  • 04 NOV 00:00Z
    The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of…
    cvelistv5