Detections
Analytics

up-imapproxy IMAP Proxy IMAP_Line_Read() Function Literal Size DoS

medium Nessus Plugin ID 15853

Language:

Synopsis

The remote IMAP server is affected by a denial of service vulnerability.

Description

The remote host is running at least one instance of up-imapproxy that does not properly handle IMAP literals. This flaw allows a remote attacker to crash the proxy, killing existing connections as well as preventing new ones, by using literals at unexpected times.

Solution

Upgrade to up-imapproxy 1.2.3rc2 or later.

See Also

https://seclists.org/bugtraq/2004/Nov/105

Plugin Details

Severity: Medium

ID: 15853

File Name: imapproxy_literal_dos.nasl

Version: 1.15

Type: remote

Published: 11/30/2004

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.7

CVSS v2

Risk Factor: Medium

Base Score: 6.4

Temporal Score: 4.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P

Vulnerability Information

Excluded KB Items: imap/false_imap

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 11/7/2004

Reference Information

CVE: CVE-2004-1035

BID: 11630