CVE-2008-5006
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP...
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
Exploit likelihood
What each source reports
NVD Score used
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
CVE-2008-5006- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
CVE-2008-5006- Updated
- 2026-11-02
EUVDEUVD-2008-4985 No score
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
EUVD-2008-4985- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r9mv-q87p-6xv4 No score
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP...
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
GHSA-r9mv-q87p-6xv4- Updated
- 2026-11-02
OSV No score
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
CVE-2008-5006- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-5006 No score
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
DEBIAN-CVE-2008-5006- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
uw-imapDebian:12 |
before 7:2007d~dfsg-1 | 7:2007d~dfsg-1 |
uw-imapDebian:4.0 From an advisory covering 2 CVEs |
before 7:2002edebian1-13.1+etch1, plus listed versions 7:2002edebian1-13.1 |
7:2002edebian1-13.1+etch1 |
uw-imapDebian:5.0 From an advisory covering 2 CVEs |
before 2007b~dfsg-4+lenny1 | 2007b~dfsg-4+lenny1 |
uw-imapDebian:5.0 From an advisory covering 3 CVEs |
before 2007b~dfsg-4+lenny3 | 2007b~dfsg-4+lenny3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-5006 is a medium vulnerability (CVSS 5.0) in University Of Washington Imap Toolkit, published November 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.91%, the 79th percentile. Fixed in uw-imap 7:2007d~dfsg-1.
References
openwall.com/lists/oss-security/2008/11/03/5
debian.org/security/2008/dsa-1685
exchange.xforce.ibmcloud.com/vulnerabilities/46604
securityfocus.com/bid/32280
secunia.com/advisories/33142
mandriva.com/security/advisories?name=MDVSA-2009:146
nvd.nist.gov/vuln/detail/CVE-2008-5006
github.com/advisories/GHSA-r9mv-q87p-6xv4
security-tracker.debian.org/tracker/CVE-2008-5006