NVD Vulnerability Detail
Search Exploit, PoC
CVE-2008-5514
Summary

Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.

Publication Date Dec. 24, 2008, 3:30 a.m.
Registration Date Jan. 29, 2021, 1:46 p.m.
Last Update Aug. 8, 2017, 10:33 a.m.
CVSS2.0 : MEDIUM
Score 4.3
Vector AV:N/AC:M/Au:N/C:N/I:N/A:P
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 中
攻撃前の認証要否(Au) 不要
機密性への影響(C) なし
完全性への影響(I) なし
可用性への影響(A) 低
Get all privileges. いいえ
Get user privileges いいえ
Get other privileges いいえ
User operation required はい
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:university_of_washington:imap:2000:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2000a:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2000b:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2000c:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2001:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2001a:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2002:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2002a:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2002b:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2002c:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2002d:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2002e:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2002f:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2004:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2004a:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2004b:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2004c:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2004d:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2004e:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2004f:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2004g:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006a:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006b:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006c:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006d:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006e:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006f:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006g:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006h:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006i:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006j:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2006k:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2007:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2007a:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:2007b:*:*:*:*:*:*:*
cpe:2.3:a:university_of_washington:imap:*:*:*:*:*:*:*:* 2007d
Related information, measures and tools
Common Vulnerabilities List