IMAP Buffer Overflow

The IMAP protocol is a widely used email protocol that allows remote access to email servers. This vulnerability exists in the authenticate command of the IMAP protocol, allowing an attacker to execute arbitrary commands on the server by overflowing the buffer used for input validation.

You're affected if you use Arbitrary command execution via IMAP buffer overflow. Specific version info not stated in the advisory. If you don't recognise this software, you're probably not affected.

To fix this vulnerability, contact the vendor directly for a patched version. Immediate mitigations include:

• Restrict network access to your email server (firewall it from the public internet)
• Audit authentication logs for suspicious activity patterns

• sunsolve.sun.com
• www.securityfocus.com
• sunsolve.sun.com
• www.securityfocus.com