CVE-2008-5006 Null dereference in n/a
Remote SMTP servers can crash the c-client library by closing the connection during QUIT, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-5006?
CVE-2008-5006 is a medium-severity vulnerability in n/a, published on 10 Nov 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
Weakness: CWE-399
Which versions are affected by CVE-2008-5006?
It affects 1 product.
Products include University of Washington Imap Toolkit.
How do I fix CVE-2008-5006?
Upgrade to a fixed version.
Is CVE-2008-5006 being exploited?
There is no known exploitation of CVE-2008-5006 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2008-5006, GHSA-r9mv-q87p-6xv4.