Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cyrus imap 2.4.5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2015-8077
Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote malicious users to have unspecified impact via vectors related to urlfetch range checks and the start_octet variable. NOTE: this vulnerability exists because of a...
Cyrus Imap 2.4.4Cyrus Imap 2.3.7Cyrus Imap 2.4.6Cyrus Imap 2.3.4Cyrus Imap 2.4.16Cyrus Imap 2.4.1Cyrus Imap 2.3.5Cyrus Imap 2.3.17Cyrus Imap 2.4.0Cyrus Imap 2.4.11Cyrus Imap 2.5.1Cyrus Imap 2.4.8Cyrus Imap 2.4.10Cyrus Imap 2.3.3Cyrus Imap 2.3.8Cyrus Imap 2.4.2Cyrus Imap 2.5.0Cyrus Imap 2.4.14Cyrus Imap 2.3.14Cyrus Imap 2.3.1Cyrus Imap 2.4.17Cyrus Imap 2.3.13
NA
CVE-2015-8078
Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote malicious users to have unspecified impact via vectors related to urlfetch range checks and the section_offset variable. NOTE: this vulnerability exists because o...
Opensuse Leap 42.1Opensuse Opensuse 13.2Cyrus Imap 2.4.4Cyrus Imap 2.3.7Cyrus Imap 2.4.6Cyrus Imap 2.3.4Cyrus Imap 2.4.16Cyrus Imap 2.4.1Cyrus Imap 2.3.5Cyrus Imap 2.3.17Cyrus Imap 2.4.0Cyrus Imap 2.4.11Cyrus Imap 2.5.1Cyrus Imap 2.4.8Cyrus Imap 2.4.10Cyrus Imap 2.3.3Cyrus Imap 2.3.8Cyrus Imap 2.4.2Cyrus Imap 2.5.0Cyrus Imap 2.4.14Cyrus Imap 2.3.14Cyrus Imap 2.3.1
NA
CVE-2015-8076
The index_urlfetch function in index.c in Cyrus IMAP 2.3.x prior to 2.3.19, 2.4.x prior to 2.4.18, 2.5.x prior to 2.5.4 allows remote malicious users to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which trigger...
Opensuse Opensuse 13.2Opensuse Leap 42.1Cyrus Imap 2.3.0Cyrus Imap 2.3.1Cyrus Imap 2.3.8Cyrus Imap 2.3.9Cyrus Imap 2.3.16Cyrus Imap 2.3.17Cyrus Imap 2.4.6Cyrus Imap 2.4.7Cyrus Imap 2.4.14Cyrus Imap 2.4.15Cyrus Imap 2.3.6Cyrus Imap 2.3.7Cyrus Imap 2.3.14Cyrus Imap 2.3.15Cyrus Imap 2.4.4Cyrus Imap 2.4.5Cyrus Imap 2.4.12Cyrus Imap 2.4.13Cyrus Imap 2.5.2Cyrus Imap 2.5.3
NA
CVE-2011-3208
Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server prior to 2.3.17 and 2.4.x prior to 2.4.11 allows remote malicious users to execute arbitrary code via a crafted NNTP command.
Cmu Cyrus Imap Server 2.0.17Cmu Cyrus Imap Server 2.1.16Cmu Cyrus Imap Server 2.2.11Cmu Cyrus Imap Server 2.2.9Cmu Cyrus Imap Server 2.3.1Cmu Cyrus Imap Server 2.3.0Cmu Cyrus Imap Server 2.3.11Cmu Cyrus Imap Server 2.1.17Cmu Cyrus Imap Server 2.1.18Cmu Cyrus Imap Server 2.2.10Cmu Cyrus Imap Server 2.2.8Cmu Cyrus Imap Server 2.3.15Cmu Cyrus Imap Server 2.3.13Cmu Cyrus Imap Server 2.3.9Cmu Cyrus Imap Server 2.3.10Cmu Cyrus Imap Server 2.3.14Cmu Cyrus Imap Server 2.2.14Cmu Cyrus Imap Server 2.2.12Cmu Cyrus Imap Server 2.3.4Cmu Cyrus Imap Server 2.3.12Cmu Cyrus Imap Server 2.3.7Cmu Cyrus Imap Server 2.3.8
NA
CVE-2011-3481
The index_get_ids function in index.c in imapd in Cyrus IMAP Server prior to 2.4.11, when server-side threading is enabled, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.
Cmu Cyrus Imap Server 2.3.13Cmu Cyrus Imap Server 2.3.9Cmu Cyrus Imap Server 2.3.7Cmu Cyrus Imap Server 2.3.8Cmu Cyrus Imap Server 2.4.8Cmu Cyrus Imap Server 2.0.17Cmu Cyrus Imap Server 2.2.9Cmu Cyrus Imap Server 2.2.8Cmu Cyrus Imap ServerCmu Cyrus Imap Server 2.3.17Cmu Cyrus Imap Server 2.3.15Cmu Cyrus Imap Server 2.3.2Cmu Cyrus Imap Server 2.4.9Cmu Cyrus Imap Server 2.4.0Cmu Cyrus Imap Server 2.1.16Cmu Cyrus Imap Server 2.4.7Cmu Cyrus Imap Server 2.3.1Cmu Cyrus Imap Server 2.3.0Cmu Cyrus Imap Server 2.3.14Cmu Cyrus Imap Server 2.3.16Cmu Cyrus Imap Server 2.3.12Cmu Cyrus Imap Server 2.3.5
NA
CVE-2011-1926
The STARTTLS implementation in Cyrus IMAP Server prior to 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a...
Cmu Cyrus Imap Server 2.4.2Cmu Cyrus Imap Server 2.4.1Cmu Cyrus Imap Server 2.4.0Cmu Cyrus Imap Server 2.3.3Cmu Cyrus Imap Server 2.3.2Cmu Cyrus Imap Server 2.3.1Cmu Cyrus Imap Server 2.3.0Cmu Cyrus Imap Server 2.1.16Cmu Cyrus Imap Server 2.3.11Cmu Cyrus Imap Server 2.0.17Cmu Cyrus Imap ServerCmu Cyrus Imap Server 2.4.5Cmu Cyrus Imap Server 2.3.7Cmu Cyrus Imap Server 2.3.6Cmu Cyrus Imap Server 2.3.12Cmu Cyrus Imap Server 2.2.12Cmu Cyrus Imap Server 2.2.11Cmu Cyrus Imap Server 2.3.16Cmu Cyrus Imap Server 2.3.14Cmu Cyrus Imap Server 2.2.13Cmu Cyrus Imap Server 2.3.9Cmu Cyrus Imap Server 2.3.8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook