Referenced CVEs:
CVE-2008-4907
Description:
===========================================================Ubuntu Security Notice USN-666-1 November 07, 2008dovecot vulnerabilityCVE-2008-4907===========================================================A security issue affects the following Ubuntu releases:Ubuntu 8.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 8.10: dovecot-imapd 1:1.1.4-0ubuntu1.2In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:It was discovered that certain email headers were not correctly handledby Dovecot. If a remote attacker sent a specially crafted email to auser with a mailbox managed by Dovecot, that user's mailbox would becomeinaccessible through Dovecot, leading to a denial of service.
More...
