5

CVE-2010-0745

Unspecified vulnerability in Dovecot 1.2.x before 1.2.11 allows remote attackers to cause a denial of service (CPU consumption) via long headers in an e-mail message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
DovecotDovecot Version1.2.0
DovecotDovecot Version1.2.1
DovecotDovecot Version1.2.2
DovecotDovecot Version1.2.3
DovecotDovecot Version1.2.4
DovecotDovecot Version1.2.5
DovecotDovecot Version1.2.6
DovecotDovecot Version1.2.7
DovecotDovecot Version1.2.8
DovecotDovecot Version1.2.9
DovecotDovecot Version1.2.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.08% 0.86
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
http://www.vupen.com/english/advisories/2010/1107
Vendor Advisory
http://dovecot.org/list/dovecot-news/2010-March/000152.html
Patch
Vendor Advisory
http://dovecot.org/pipermail/dovecot/2010-February/047190.html
http://marc.info/?l=oss-security&m=127013715227551&w=2
http://security-tracker.debian.org/tracker/CVE-2010-0745
http://www.mandriva.com/security/advisories?name=MDVSA-2010:104
http://www.openwall.com/lists/oss-security/2010/03/10/6
http://www.vupen.com/english/advisories/2010/1226
https://bugzilla.redhat.com/show_bug.cgi?id=572268