A critical vulnerability in Open-Xchange OX Dovecot Pro allows remote, unauthenticated attackers to cause a denial of service by crashing the ManageSieve service.

The ManageSieve component suffers from improper input validation (CWE-20) when processing SASL initial responses. An unauthenticated attacker can send a malformed literal to the service, triggering a crash that renders the service unavailable for legitimate users.

The exploitation of this vulnerability results in a denial of service for the ManageSieve protocol, which is critical for email filtering management. With a CVSS score of 7.5, the risk is elevated due to the ease of exploitation over the network without requiring authentication. Service disruption can lead to significant operational delays for organizations relying on Dovecot for mail server infrastructure.

Immediate Action: Upgrade to the latest patched version provided in the vendor security advisory. If patching is not immediately feasible, disable the ManageSieve service if it is not required for production operations.

Proactive Monitoring: Monitor server logs for repeated ManageSieve service restarts or unexpected crashes. Investigate network traffic directed at the ManageSieve port for anomalous SASL authentication patterns.

Compensating Controls: Restrict access to the ManageSieve service port at the network perimeter or via host-based firewalls to authorized IP addresses only.

Public Exploit Available: No (exploit_available: false)

Given the ease of exploitability and the potential for service interruption, organizations should prioritize patching their OX Dovecot Pro installations. Administrators should verify their current version against the vendor advisory and apply the necessary updates to eliminate the risk of denial of service.