CVE-2008-5514
Published Dec 23, 2008
Last updated 7 years ago
Overview
- Description
- Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.
- Source
- secalert@redhat.com
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-119
Social media
- Hype score
- Not currently trending
Vendor comments
- Red HatNot vulnerable. This issue did not affect the versions of imap as shipped with Red Hat Enterprise Linux 2.1 and 3, and the versions of libc-client as shipped with Red Hat Enterprise Linux 4 and 5.
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:university_of_washington:imap:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26CF4464-7DBE-4C8E-B6CF-A4777ADB1D96",
"versionEndIncluding": "2007d"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68ABE6C6-A499-4E11-91E9-8F8B61776BDE"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2000a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BE0A870-F96D-42A8-ACDA-EC6BF9C4CAD7"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2000b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2F84DA2-C7DE-4659-AEB6-8E4AB059B85A"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2000c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DACC0FF-2831-4905-8862-DC46D9EF2B3D"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2001:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64C291AE-CA06-4982-AB18-A2C6DF6BCB9E"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2001a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85B417A8-D3DF-4808-9880-BCDB747148E6"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8284427-CFFE-4075-9EC1-5E77DD5F0F9F"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2002a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "593B87AB-3009-4690-B09F-2D79E7019B2A"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2002b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C43CED0-66F6-4D3B-A24B-81ACA70243D5"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2002c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABD1CAF4-C478-4126-A450-AFBCA5CC1ACF"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2002d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35F2E0DB-E67C-4351-BC9D-6DF77F07D2D1"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2002e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB4BB0BD-03F6-403B-BE5A-9D610DF59869"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2002f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "851E2CD6-E061-4236-B44C-FC9810CD16DF"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2004:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "188B27E0-5BAF-46B2-82F0-79CA0859A33D"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2004a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E78E770B-83C3-414F-8F1F-2E70C604873E"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2004b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8E72678-D201-4A9E-B42F-E76B44C2F062"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2004c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E232637-E1E6-4B85-9AF1-FD91A9767087"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2004d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA74AD8D-6364-4DA9-8F0A-A11AE9FB1011"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2004e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3465EC3A-5250-4729-AC7A-AE9D0E4C8BFB"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2004f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E4D902D-C846-4698-952A-028927D24ABC"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2004g:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7724A2ED-D633-43C0-B547-FBD8EBA86DBF"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6C44FAA-8BDE-4C86-9891-A1CF6B23407F"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CB3CD69-985E-4DE1-9A08-E4EB216F0793"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8423C322-77A5-4CAA-8901-8B8F1D9FF8E8"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9862573C-0379-4585-8ECB-2B3B98FA7944"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006d:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C028BF64-22F5-424E-A959-42AEB2ABEED6"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006e:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9EAB09AD-F648-402F-921A-9345275143BD"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006f:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E8DA588-ADCA-4125-8217-F27D035948FE"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006g:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F552DEE9-4730-405E-B482-E002E5A39A67"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006h:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E74FA86E-A6A0-4EC7-A0F7-31AE362F9308"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006i:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CC6B678-CF97-431C-8EFB-5E2223966F78"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006j:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D9229C6-6251-4675-9396-5753AB81C80A"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2006k:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E280DD2-F66A-48FF-B23A-FF49753C2654"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2007:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85BC14FB-C24B-405D-9C83-1444874489AC"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2007a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E25C5926-DCA2-4766-B2DE-C5818494F850"
},
{
"criteria": "cpe:2.3:a:university_of_washington:imap:2007b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "535F9E8E-6BB4-455D-A8A4-50D0531F28A2"
}
],
"operator": "OR"
}
]
}
]