PT-2018-9012
CVE-2018-0684
·
Published
2018-11-15
·
Updated
2018-12-17
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Denbun POP versions V3.3P R3.0 and earlier
Denbun IMAP versions V3.3I R3.0 and earlier
Description
A buffer overflow issue allows remote attackers to execute arbitrary code or cause a denial-of-service (DoS) condition via multipart/form-data format data. This can lead to the execution of arbitrary code or disruption of service.
Recommendations
For Denbun POP versions V3.3P R3.0 and earlier, update to a version later than V3.3P R3.0 to resolve the issue.
For Denbun IMAP versions V3.3I R3.0 and earlier, update to a version later than V3.3I R3.0 to resolve the issue.
As a temporary workaround, consider restricting the handling of multipart/form-data format data until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾