CVEvulnerability

CVE-1999-1224

3.6 LOW Published 1997-10-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1997-10-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.6 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:P

Description

IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information.

Affected configurations

• university of washington imapd • university of washington imapd 4.1

References