USN-1143-1: Dovecot vulnerability

Releases

• Ubuntu 11.04
• Ubuntu 10.10
• Ubuntu 10.04

Packages

• dovecot - IMAP and POP3 email server

Details

It was discovered that the message header parser in Dovecot did not
properly handle '\0' characters in header names. This could allow a
remote attacker to cause a denial of service through a crafted email
message by crashing the Dovecot daemon or corrupting mailboxes.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 11.04

• dovecot-common - 1:1.2.15-3ubuntu2.1

Ubuntu 10.10

• dovecot-common - 1:1.2.12-1ubuntu8.2

Ubuntu 10.04

• dovecot-common - 1:1.2.9-1ubuntu6.4

In general, a standard system update will make all the necessary changes.

References

• CVE-2011-1929