Ludwig Nussel reported a flaw in libc-client / uw-imap:

The rfc822outputchar() function in the uw-imap c-client library does not check whether the buffer is already full and may therefore write one byte too much. This leads to a segfault in rfc822outputdata() later due to memcpy with size -1.

Issue was fixed in imap-2007e: Updated: 16 December 2008

imap-2007e is a maintenance release, consisting primarily of bugfixes to problems discovered in the release that affected a small number of users plus a security fix for users of the RFC822BUFFER routines.