See how imap compares to other vendors in security performance
The imap package provides server daemons for both the IMAP (InternetMessage Access Protocol) and POP (Post Office Protocol) mail access protocols.A buffer overflow flaw was discovered in the dmail and tmail mail deliveryutilities shipped with imap. If either of these utilities were used as amail delivery agent, a remote attacker could potentially use this flaw torun arbitrary code as the targeted user by sending a specially-crafted mailmessage to the victim. (CVE-2008-5005)Users of imap should upgrade to these updated packages, which contain abackported patch to resolve this issue.