carnegie mellon university cyrus imap server 1.5.19 vulnerabilities and exploits

(subscribe to this query)

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote malicious users to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.

Carnegie Mellon University Cyrus Imap Server 2.0.12 Carnegie Mellon University Cyrus Imap Server 2.0.16 Carnegie Mellon University Cyrus Imap Server 2.1.10 Carnegie Mellon University Cyrus Imap Server 2.1.9 Carnegie Mellon University Cyrus Imap Server 1.4 Carnegie Mellon University Cyrus Imap Server 1.5.19

1 EDB exploit

Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and previous versions, with the imapmagicplus option enabled, may allow remote malicious users to execute arbitrary code, a different vulnerability than CVE-2004-1011.

Carnegie Mellon University Cyrus Imap Server 1.4 Carnegie Mellon University Cyrus Imap Server 1.5.19 Carnegie Mellon University Cyrus Imap Server 2.2.1 Beta Carnegie Mellon University Cyrus Imap Server 2.2.2 Beta Carnegie Mellon University Cyrus Imap Server 2.2.9 Carnegie Mellon University Cyrus Imap Server 2.1.9 Carnegie Mellon University Cyrus Imap Server 2.2.0 Alpha Carnegie Mellon University Cyrus Imap Server 2.2.7 Carnegie Mellon University Cyrus Imap Server 2.1.16 Carnegie Mellon University Cyrus Imap Server 2.1.7 Carnegie Mellon University Cyrus Imap Server 2.2.5 Carnegie Mellon University Cyrus Imap Server 2.2.6 Carnegie Mellon University Cyrus Imap Server 2.2.8 Carnegie Mellon University Cyrus Imap Server 2.0.12 Carnegie Mellon University Cyrus Imap Server 2.0.16 Carnegie Mellon University Cyrus Imap Server 2.1.10 Carnegie Mellon University Cyrus Imap Server 2.2.3 Carnegie Mellon University Cyrus Imap Server 2.2.4 Ubuntu Ubuntu Linux 4.1 Redhat Fedora Core Core 2.0 Redhat Fedora Core Core 3.0

Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and previous versions leads to a buffer overflow, which may allow remote malicious users to execute arbitrary code via the username.

Carnegie Mellon University Cyrus Imap Server 2.1.10 Carnegie Mellon University Cyrus Imap Server 2.1.16 Carnegie Mellon University Cyrus Imap Server 2.2.4 Carnegie Mellon University Cyrus Imap Server 2.2.5 Carnegie Mellon University Cyrus Imap Server 1.4 Carnegie Mellon University Cyrus Imap Server 1.5.19 Carnegie Mellon University Cyrus Imap Server 2.2.0 Alpha Carnegie Mellon University Cyrus Imap Server 2.2.1 Beta Carnegie Mellon University Cyrus Imap Server 2.2.8 Carnegie Mellon University Cyrus Imap Server 2.2.9 Carnegie Mellon University Cyrus Imap Server 2.1.7 Carnegie Mellon University Cyrus Imap Server 2.1.9 Carnegie Mellon University Cyrus Imap Server 2.2.6 Carnegie Mellon University Cyrus Imap Server 2.2.7 Carnegie Mellon University Cyrus Imap Server 2.0.12 Carnegie Mellon University Cyrus Imap Server 2.0.16 Carnegie Mellon University Cyrus Imap Server 2.2.2 Beta Carnegie Mellon University Cyrus Imap Server 2.2.3 Ubuntu Ubuntu Linux 4.1 Redhat Fedora Core Core 2.0 Redhat Fedora Core Core 3.0

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and previous versions allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index in...

Carnegie Mellon University Cyrus Imap Server 2.1.7 Carnegie Mellon University Cyrus Imap Server 2.1.9 Carnegie Mellon University Cyrus Imap Server 2.2.7 Carnegie Mellon University Cyrus Imap Server 2.2.8 Carnegie Mellon University Cyrus Imap Server 2.1.10 Carnegie Mellon University Cyrus Imap Server 2.1.16 Carnegie Mellon University Cyrus Imap Server 2.2.4 Carnegie Mellon University Cyrus Imap Server 2.2.5 Carnegie Mellon University Cyrus Imap Server 2.2.6 Carnegie Mellon University Cyrus Imap Server 2.2.2 Beta Carnegie Mellon University Cyrus Imap Server 2.2.3 Conectiva Linux 9.0 Carnegie Mellon University Cyrus Imap Server 2.2.0 Alpha Carnegie Mellon University Cyrus Imap Server 2.2.1 Beta Openpkg Openpkg Current Conectiva Linux 10.0 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Redhat Fedora Core Core 2.0 Redhat Fedora Core Core 3.0 Ubuntu Ubuntu Linux 4.1 Trustix Secure Linux 2.2

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x up to and including 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an inde...

Carnegie Mellon University Cyrus Imap Server 2.1.7 Carnegie Mellon University Cyrus Imap Server 2.1.9 Carnegie Mellon University Cyrus Imap Server 2.2.7 Carnegie Mellon University Cyrus Imap Server 2.2.8 Carnegie Mellon University Cyrus Imap Server 2.1.10 Carnegie Mellon University Cyrus Imap Server 2.1.16 Carnegie Mellon University Cyrus Imap Server 2.2.5 Carnegie Mellon University Cyrus Imap Server 2.2.6 Carnegie Mellon University Cyrus Imap Server 2.2.2 Beta Carnegie Mellon University Cyrus Imap Server 2.2.3 Carnegie Mellon University Cyrus Imap Server 2.2.4 Conectiva Linux 9.0 Carnegie Mellon University Cyrus Imap Server 2.2.0 Alpha Carnegie Mellon University Cyrus Imap Server 2.2.1 Beta Openpkg Openpkg Current Conectiva Linux 10.0 Trustix Secure Linux 2.0 Trustix Secure Linux 2.1 Redhat Fedora Core Core 2.0 Redhat Fedora Core Core 3.0 Ubuntu Ubuntu Linux 4.1 Trustix Secure Linux 2.2

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook