PT-2018-9012

CVE-2018-0684

·

Published

2018-11-15

·

Updated

2018-12-17

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Denbun POP versions V3.3P R3.0 and earlier Denbun IMAP versions V3.3I R3.0 and earlier
Description A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via multipart/form-data format data. This can lead to the execution of arbitrary code or disruption of service.
Recommendations For Denbun POP versions V3.3P R3.0 and earlier, update to a version later than V3.3P R3.0 to resolve the issue. For Denbun IMAP versions V3.3I R3.0 and earlier, update to a version later than V3.3I R3.0 to resolve the issue. As a temporary workaround, consider restricting the handling of multipart/form-data format data until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾