Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings. This occurs because '\0' characters are mishandled, and can lead to out-of-bounds writes and remote code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dovecot和Pigeonhole 缓冲区错误漏洞
Vulnerability Description
Dovecot是一款开源的基于类Linux/UNIX系统的IMAP和POP3邮件服务器。Pigeonhole是一款在Dovecot的基础上添加对Sieve语言和ManageSieve协议的项目。 Pigeonhole 0.5.7.2之前版本、Dovecot 2.2.36.4之前版本和2.3.7.2之前的2.3.x版本中存在缓冲区错误漏洞，该漏洞源于程序没有正确处理‘’字符。攻击者可利用该漏洞执行代码。
CVSS Information
N/A
Vulnerability Type
N/A