Mandriva Linux Security Advisory : dovecot (MDVSA-2015:113)
Medium Nessus Plugin ID 82366
SynopsisThe remote Mandriva Linux host is missing one or more security updates.
DescriptionUpdated dovecot packages fix security vulnerability.
Dovecot before 2.2.13 is vulnerable to a DoS attack against imap/pop3-login processes. If SSL/TLS handshake was started but wasn't finished, the login process attempted to eventually forcibly disconnect the client, but failed to do it correctly. This could have left the connections hanging around for a long time (CVE-2014-3430).
SolutionUpdate the affected packages.