Unscored severity · published Oct 8, 1997
CVE-1999-1224
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of…
–
CVSS
0.3%
EPSS
No
On KEV
Description
IMAP 4.1 BETA, and possibly other versions, does not properly handle the SIGABRT (abort) signal, which allows local users to crash the server (imapd) via certain sequences of commands, which causes a core dump that may contain sensitive password information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Imapd · University OF Washington
4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1224
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1224
marc.info
http://marc.info/?l=bugtraq&m=87635124302928&w=2
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/349
More from Imapd
–
CVE-2001-0691
Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations