CVE-2008-5006
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP...
CVE-2008-5006 is a medium vulnerability (CVSS 5.0) in University Of Washington Imap Toolkit, published November 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.91%, the 80th percentile. Fixed in uw-imap 7:2007d~dfsg-1.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 1.91%EPSS, 80th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
7:2007d~dfsg-1uw-imap +3 more
Description
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
uw-imapDebian:12 | before 7:2007d~dfsg-1 | 7:2007d~dfsg-1 |
uw-imapDebian:4.0 From an advisory covering 2 CVEs | before 7:2002edebian1-13.1+etch1, plus listed versions 7:2002edebian1-13.1 | 7:2002edebian1-13.1+etch1 |
uw-imapDebian:5.0 From an advisory covering 2 CVEs | before 2007b~dfsg-4+lenny1 | 2007b~dfsg-4+lenny1 |
uw-imapDebian:5.0 From an advisory covering 3 CVEs | before 2007b~dfsg-4+lenny3 | 2007b~dfsg-4+lenny3 |
What each source reports
NVD Score used
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
CVE-2008-5006- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE ListNo score
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
CVE-2008-5006- Updated
- 2026-11-02
EUVDEUVD-2008-4985No score
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
EUVD-2008-4985- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r9mv-q87p-6xv4No score
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP...
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
GHSA-r9mv-q87p-6xv4- Updated
- 2026-11-02
OSVNo score
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
CVE-2008-5006- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-5006No score
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
- Record
DEBIAN-CVE-2008-5006- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
openwall.com/lists/oss-security/2008/11/03/5
debian.org/security/2008/dsa-1685
exchange.xforce.ibmcloud.com/vulnerabilities/46604
securityfocus.com/bid/32280
secunia.com/advisories/33142
mandriva.com/security/advisories?name=MDVSA-2009:146
nvd.nist.gov/vuln/detail/CVE-2008-5006
github.com/advisories/GHSA-r9mv-q87p-6xv4
security-tracker.debian.org/tracker/CVE-2008-5006