Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service (CPU consumption) via long headers in an e-mail message.

The remote host is affected by the vulnerability described in GLSA-201110-04 (Dovecot: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Dovecot. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could exploit these vulnerabilities to cause the       remote execution of arbitrary code, or a Denial of Service condition, to       conduct directory traversal attacks, corrupt data, or disclose       information.
  Workaround :

    There is no known workaround at this time.

A vulnerability was discovered and corrected in dovecot :

Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service (CPU consumption) via long headers in an e-mail message (CVE-2010-0745).

This update provides dovecot 1.2.11 which is not vulnerable to this issue and also holds many bugfixes as well.

Huge mail headers could cause dovecot to consume excessive amounts of CPU (CVE-2010-0745)

dovecot was updated to version 1.2.11 which fixes the problem.

ID	Name	Product	Family	Severity
56446	GLSA-201110-04 : Dovecot: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
48184	Mandriva Linux Security Advisory : dovecot (MDVSA-2010:104)	Nessus	Mandriva Local Security Checks	medium
46178	openSUSE Security Update : dovecot12 (openSUSE-SU-2010:0175-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2010-0745

high

Tenable Plugins

high

medium

medium