CVE-2006-5973
Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions,...
Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.
Exploit likelihood
What each source reports
NVD Score used
Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.
- Record
CVE-2006-5973- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.
- Record
CVE-2006-5973- Updated
- 2026-11-02
EUVDEUVD-2006-5956 No score
Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.
- Record
EUVD-2006-5956- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2xmp-j7gv-wmqh No score
Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions,...
Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.
- Record
GHSA-2xmp-j7gv-wmqh- Updated
- 2026-11-02
OSV No score
Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.
- Record
CVE-2006-5973- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-5973 No score
Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.
- Record
DEBIAN-CVE-2006-5973- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5973 is a medium vulnerability (CVSS 5.0) in Timo Sirainen Dovecot, published November 20, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.86%, the 86th percentile. Fixed in dovecot 1.0.rc15-1.
References
dovecot.org/pipermail/dovecot-news/2006-November/000024.html
ubuntu.com/usn/usn-387-1
secunia.com/advisories/23150
novell.com/linux/security/advisories/2006_73_mono.html
Show 11 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/30433
securityfocus.com/archive/1/452081/100/0/threaded
securitytracker.com/id?1017288
vupen.com/english/advisories/2006/4614
issues.rpath.com/browse/RPL-802
nvd.nist.gov/vuln/detail/CVE-2006-5973
github.com/advisories/GHSA-2xmp-j7gv-wmqh
security-tracker.debian.org/tracker/CVE-2006-5973