Dovecot Double Free Denial of Service Vulnerability

Bugtraq ID:	16672
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 15 2006 12:00AM
Updated:	Feb 15 2006 12:00AM
Credit:	This issue was reported by the vendor.
Vulnerable:	Dovecot Dovecot 1.0.Beta2 Dovecot Dovecot 1.0
Not Vulnerable:	Dovecot Dovecot 1.0.Beta3

Dovecot Double Free Denial of Service Vulnerability

Dovecot is prone to a double-free vulnerability that may allow attackers to trigger a denial-of- service condition.

Dovecot versions prior to 1.0 beta3 are vulnerable.

Dovecot Double Free Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Dovecot Double Free Denial of Service Vulnerability

Solution:
The vendor has released version 1.0 beta3 to address this issue. Please see the reference section for more information.


Dovecot Dovecot 1.0.Beta2

• Dovecot dovecot-1.0.beta3.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.beta3.tar.gz

Dovecot Dovecot 1.0

• Dovecot dovecot-1.0.beta3.tar.gz
  http://www.dovecot.org/releases/dovecot-1.0.beta3.tar.gz

Dovecot Double Free Denial of Service Vulnerability

References:

• Dovecot Double Free Error (Dovecot)
  
• Vendor Homepage (Dovecot)