dovecot security update
dovecot crash when parsing mail headers that contain NUL
characters (CVE-2011-1929)
-
Submitted by
Adrian Schröter (adrianSuSE)
- Version 4609
Fixed bugs
bnc#694778
VUL-0: dovecot crash when parsing headers that contain NUL characters
CVE#CVE-2011-1929
lib-mail/message-header-parser.c in Dovecot 1.2.x before 1.2.17 and 2.0.x before 2.0.13 does not properly handle 0 characters in header names, which allows remote attackers to cause a denial of service (daemon crash or mailbox corruption) via a crafted
