CVE-2008-5006: University Of Washington Imap Toolkit

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.

Affected products

Published 2008-11-10. Last modified 2026-06-16.