Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cyrus imapd 2.1.18 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2011-3208
Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server prior to 2.3.17 and 2.4.x prior to 2.4.11 allows remote malicious users to execute arbitrary code via a crafted NNTP command.
Cmu Cyrus Imap Server 2.0.17Cmu Cyrus Imap Server 2.1.16Cmu Cyrus Imap Server 2.2.11Cmu Cyrus Imap Server 2.2.9Cmu Cyrus Imap Server 2.3.1Cmu Cyrus Imap Server 2.3.0Cmu Cyrus Imap Server 2.3.11Cmu Cyrus Imap Server 2.1.17Cmu Cyrus Imap Server 2.1.18Cmu Cyrus Imap Server 2.2.10Cmu Cyrus Imap Server 2.2.8Cmu Cyrus Imap Server 2.3.15Cmu Cyrus Imap Server 2.3.13Cmu Cyrus Imap Server 2.3.9Cmu Cyrus Imap Server 2.3.10Cmu Cyrus Imap Server 2.3.14Cmu Cyrus Imap Server 2.2.14Cmu Cyrus Imap Server 2.2.12Cmu Cyrus Imap Server 2.3.4Cmu Cyrus Imap Server 2.3.12Cmu Cyrus Imap Server 2.3.7Cmu Cyrus Imap Server 2.3.8
7.5
CVSSv2
CVE-2009-0688
Multiple buffer overflows in the CMU Cyrus SASL library prior to 2.1.23 might allow remote malicious users to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
Carnegie Mellon University Cyrus-sasl 2.1.19Carnegie Mellon University Cyrus-saslCarnegie Mellon University Cyrus-sasl 1.5.24Carnegie Mellon University Cyrus-sasl 1.5.15Carnegie Mellon University Cyrus-sasl 1.5.16Carnegie Mellon University Cyrus-sasl 1.5.27Carnegie Mellon University Cyrus-sasl 1.5.3Carnegie Mellon University Cyrus-sasl 2.0.5Carnegie Mellon University Cyrus-sasl 2.1.0Carnegie Mellon University Cyrus-sasl 2.1.1Carnegie Mellon University Cyrus-sasl 2.1.16Carnegie Mellon University Cyrus-sasl 2.1.21Carnegie Mellon University Cyrus-sasl 2.1.20Carnegie Mellon University Cyrus-sasl 1.5.11Carnegie Mellon University Cyrus-sasl 1.5.13Carnegie Mellon University Cyrus-sasl 1.5.23Carnegie Mellon University Cyrus-sasl 1.5.26Carnegie Mellon University Cyrus-sasl 2.0.3Carnegie Mellon University Cyrus-sasl 2.0.4Carnegie Mellon University Cyrus-sasl 2.1.14Carnegie Mellon University Cyrus-sasl 2.1.15Carnegie Mellon University Cyrus-sasl 2.1.6
7.5
CVSSv2
CVE-2005-0546
Multiple buffer overflows in Cyrus IMAPd prior to 2.2.11 may allow malicious users to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews,...
Cyrus Imapd 2.0.17Cyrus Imapd 2.1.16Cyrus Imapd 2.1.17Cyrus Imapd 2.1.18Cyrus Imapd 2.2.10
5.1
CVSSv2
CVE-2011-1926
The STARTTLS implementation in Cyrus IMAP Server prior to 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle malicious users to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a...
Cmu Cyrus Imap Server 2.4.2Cmu Cyrus Imap Server 2.4.1Cmu Cyrus Imap Server 2.4.0Cmu Cyrus Imap Server 2.3.3Cmu Cyrus Imap Server 2.3.2Cmu Cyrus Imap Server 2.3.1Cmu Cyrus Imap Server 2.3.0Cmu Cyrus Imap Server 2.1.16Cmu Cyrus Imap Server 2.3.11Cmu Cyrus Imap Server 2.0.17Cmu Cyrus Imap ServerCmu Cyrus Imap Server 2.4.5Cmu Cyrus Imap Server 2.3.7Cmu Cyrus Imap Server 2.3.6Cmu Cyrus Imap Server 2.3.12Cmu Cyrus Imap Server 2.2.12Cmu Cyrus Imap Server 2.2.11Cmu Cyrus Imap Server 2.3.16Cmu Cyrus Imap Server 2.3.14Cmu Cyrus Imap Server 2.2.13Cmu Cyrus Imap Server 2.3.9Cmu Cyrus Imap Server 2.3.8
4.3
CVSSv2
CVE-2011-3481
The index_get_ids function in index.c in imapd in Cyrus IMAP Server prior to 2.4.11, when server-side threading is enabled, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.
Cmu Cyrus Imap Server 2.3.13Cmu Cyrus Imap Server 2.3.9Cmu Cyrus Imap Server 2.3.7Cmu Cyrus Imap Server 2.3.8Cmu Cyrus Imap Server 2.4.8Cmu Cyrus Imap Server 2.0.17Cmu Cyrus Imap Server 2.2.9Cmu Cyrus Imap Server 2.2.8Cmu Cyrus Imap ServerCmu Cyrus Imap Server 2.3.17Cmu Cyrus Imap Server 2.3.15Cmu Cyrus Imap Server 2.3.2Cmu Cyrus Imap Server 2.4.9Cmu Cyrus Imap Server 2.4.0Cmu Cyrus Imap Server 2.1.16Cmu Cyrus Imap Server 2.4.7Cmu Cyrus Imap Server 2.3.1Cmu Cyrus Imap Server 2.3.0Cmu Cyrus Imap Server 2.3.14Cmu Cyrus Imap Server 2.3.16Cmu Cyrus Imap Server 2.3.12Cmu Cyrus Imap Server 2.3.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook