CVE-2006-5973: Timo Sirainen Dovecot

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file.

Affected products

• Timo Sirainen Dovecot: version 1.0 only; version 1.0.alpha1 only; version 1.0.alpha2 only; version 1.0.alpha3 only; version 1.0.alpha4 only; version 1.0.alpha5 only; …

Published 2006-11-20. Last modified 2026-06-16.