Vulnerabilities > CVE-1999-1224 - Unspecified vulnerability in University of Washington Imapd 4.1

047910
CVSS 3.6 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
PARTIAL
local
low complexity
university-of-washington

Summary

IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information.

Vulnerable Configurations

Part Description Count
Application
University_Of_Washington
2