Attacker Value
Unknown
(0 users assessed)
Exploitability
Unknown
(0 users assessed)
User Interaction
Unknown
Privileges Required
Unknown
Attack Vector
Unknown
0

CVE-2008-5514

Disclosure Date: December 23, 2008
Add MITRE ATT&CK tactics and techniques that apply to this CVE.

Description

Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.

Add Assessment

No one has assessed this topic. Be the first to add your voice to the community.

CVSS V3 Severity and Metrics
Base Score:
None
Impact Score:
Unknown
Exploitability Score:
Unknown
Vector:
Unknown
Attack Vector (AV):
Unknown
Attack Complexity (AC):
Unknown
Privileges Required (PR):
Unknown
User Interaction (UI):
Unknown
Scope (S):
Unknown
Confidentiality (C):
Unknown
Integrity (I):
Unknown
Availability (A):
Unknown

General Information

Vendors

  • university of washington

Products

  • imap,
  • imap 2000,
  • imap 2000a,
  • imap 2000b,
  • imap 2000c,
  • imap 2001,
  • imap 2001a,
  • imap 2002,
  • imap 2002a,
  • imap 2002b,
  • imap 2002c,
  • imap 2002d,
  • imap 2002e,
  • imap 2002f,
  • imap 2004,
  • imap 2004a,
  • imap 2004b,
  • imap 2004c,
  • imap 2004d,
  • imap 2004e,
  • imap 2004f,
  • imap 2004g,
  • imap 2006,
  • imap 2006a,
  • imap 2006b,
  • imap 2006c,
  • imap 2006d,
  • imap 2006e,
  • imap 2006f,
  • imap 2006g,
  • imap 2006h,
  • imap 2006i,
  • imap 2006j,
  • imap 2006k,
  • imap 2007,
  • imap 2007a,
  • imap 2007b
Technical Analysis