Dovecot Denial of Service Vulnerability
BID:67306
Info
Dovecot Denial of Service Vulnerability
| Bugtraq ID: | 67306 |
| Class: | Design Error |
| CVE: |
CVE-2014-3430 |
| Remote: | Yes |
| Local: | No |
| Published: | May 09 2014 12:00AM |
| Updated: | May 07 2015 05:09PM |
| Credit: | Henri Salo |
| Vulnerable: |
Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 12.10 i386 Ubuntu Ubuntu Linux 12.10 amd64 Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server AUS 6.5 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux Load Balancer EUS 6.5.z Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux Dovecot Dovecot 2.2.7 Dovecot Dovecot 2.2.5 Dovecot Dovecot 2.2.4 Dovecot Dovecot 2.2.2 Dovecot Dovecot 2.2.1 Dovecot Dovecot 2.1.15 Dovecot Dovecot 2.0.13 Dovecot Dovecot 2.0.12 Dovecot Dovecot 2.0.4 Dovecot Dovecot 2.0.3 Dovecot Dovecot 2.0.2 Dovecot Dovecot 2.0.1 Dovecot Dovecot 1.2.17 Dovecot Dovecot 1.2.16 Dovecot Dovecot 1.2.15 Dovecot Dovecot 1.2.14 Dovecot Dovecot 1.2.13 Dovecot Dovecot 1.2.12 Dovecot Dovecot 1.2.11 Dovecot Dovecot 1.2.10 Dovecot Dovecot 1.2.9 Dovecot Dovecot 1.2.8 Dovecot Dovecot 1.2.7 Dovecot Dovecot 1.1.6 Dovecot Dovecot 1.1.5 Dovecot Dovecot 1.1.4 Dovecot Dovecot 2.2.9 Dovecot Dovecot 2.2.8 Dovecot Dovecot 2.2.6 Dovecot Dovecot 2.2.3 Dovecot Dovecot 2.2.0 Dovecot Dovecot 2.2 Rc7 Dovecot Dovecot 2.2 Rc6 Dovecot Dovecot 2.2 Rc5 Dovecot Dovecot 2.2 RC4 Dovecot Dovecot 2.2 Rc3 Dovecot Dovecot 2.2 rc2 Dovecot Dovecot 2.2 Rc1 Dovecot Dovecot 2.2 Dovecot Dovecot 2.1.8 Dovecot Dovecot 2.1.7 Dovecot Dovecot 2.1.6 Dovecot Dovecot 2.1.5 Dovecot Dovecot 2.1.4 Dovecot Dovecot 2.1.3 Dovecot Dovecot 2.1.2 Dovecot Dovecot 2.1.14 Dovecot Dovecot 2.1.13 Dovecot Dovecot 2.1.12 Dovecot Dovecot 2.1.11 Dovecot Dovecot 2.1.10 Dovecot Dovecot 2.1.1 Dovecot Dovecot 2.1.0 Dovecot Dovecot 2.1 Rc7 Dovecot Dovecot 2.1 Rc6 Dovecot Dovecot 2.1 RC5 Dovecot Dovecot 2.1 RC3 Dovecot Dovecot 2.1 Rc2 Dovecot Dovecot 2.1 Rc1 Dovecot Dovecot 2.0.9 Dovecot Dovecot 2.0.8 Dovecot Dovecot 2.0.7 Dovecot Dovecot 2.0.6 Dovecot Dovecot 2.0.5 Dovecot Dovecot 2.0.3 Dovecot Dovecot 2.0.16 Dovecot Dovecot 2.0.15 Dovecot Dovecot 2.0.14 Dovecot Dovecot 2.0.11 Dovecot Dovecot 2.0.10 Dovecot Dovecot 2.0.0 Dovecot Dovecot 2.0 Beta1 Dovecot Dovecot 2.0 Dovecot Dovecot 1.2.6 Dovecot Dovecot 1.2.5 Dovecot Dovecot 1.2.4 Dovecot Dovecot 1.2.3 Dovecot Dovecot 1.2.2 Dovecot Dovecot 1.2.1 Dovecot Dovecot 1.2.0 Dovecot Dovecot 1.2 Dovecot Dovecot 1.1rc3 Dovecot Dovecot 1.1rc2 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 6 |
| Not Vulnerable: | |
Discussion
Dovecot Denial of Service Vulnerability
Dovecot is prone to a remote denial-of-service vulnerability.
Successful exploits may allow the attacker to cause the application to hang, resulting in denial-of-service conditions.
Dovecot versions 1.1 and later are vulnerable.
Dovecot is prone to a remote denial-of-service vulnerability.
Successful exploits may allow the attacker to cause the application to hang, resulting in denial-of-service conditions.
Dovecot versions 1.1 and later are vulnerable.
Exploit / POC
Dovecot Denial of Service Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
Dovecot Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
Solution:
Updates are available. Please see the references or vendor advisory for more information.
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva dovecot-1.1.6-0.5mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva dovecot-devel-1.1.6-0.5mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva dovecot-plugins-gssapi-1.1.6-0.5mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva dovecot-plugins-ldap-1.1.6-0.5mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/
MandrakeSoft Enterprise Server 5
-
Mandriva dovecot-1.1.6-0.5mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva dovecot-devel-1.1.6-0.5mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva dovecot-plugins-gssapi-1.1.6-0.5mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva dovecot-plugins-ldap-1.1.6-0.5mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/