Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

imap vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2015-8076
The index_urlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which triggers an...
Opensuse Opensuse 13.2Opensuse Leap 42.1Cyrus Imap 2.3.0Cyrus Imap 2.3.1Cyrus Imap 2.3.8Cyrus Imap 2.3.9Cyrus Imap 2.3.16Cyrus Imap 2.3.17Cyrus Imap 2.4.6Cyrus Imap 2.4.7Cyrus Imap 2.4.14Cyrus Imap 2.4.15Cyrus Imap 2.3.6Cyrus Imap 2.3.7Cyrus Imap 2.3.14Cyrus Imap 2.3.15Cyrus Imap 2.4.4Cyrus Imap 2.4.5Cyrus Imap 2.4.12Cyrus Imap 2.4.13Cyrus Imap 2.5.2Cyrus Imap 2.5.3Cyrus Imap 2.3.4Cyrus Imap 2.3.5Cyrus Imap 2.3.12Cyrus Imap 2.3.13Cyrus Imap 2.4.1Cyrus Imap 2.4.2Cyrus Imap 2.4.3Cyrus Imap 2.4.10Cyrus Imap 2.4.11Cyrus Imap 2.5.0Cyrus Imap 2.5.1Cyrus Imap 2.3.2Cyrus Imap 2.3.3Cyrus Imap 2.3.10Cyrus Imap 2.3.11Cyrus Imap 2.3.18Cyrus Imap 2.4.0Cyrus Imap 2.4.8Cyrus Imap 2.4.9Cyrus Imap 2.4.16Cyrus Imap 2.4.17
NA
CVE-2015-8077
Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the start_octet variable. NOTE: this vulnerability exists because of an...
Cyrus Imap 2.3.0Cyrus Imap 2.3.8Cyrus Imap 2.3.9Cyrus Imap 2.3.16Cyrus Imap 2.3.17Cyrus Imap 2.4.5Cyrus Imap 2.4.6Cyrus Imap 2.4.14Cyrus Imap 2.4.15Cyrus Imap 2.3.5Cyrus Imap 2.3.6Cyrus Imap 2.3.7Cyrus Imap 2.3.14Cyrus Imap 2.3.15Cyrus Imap 2.4.3Cyrus Imap 2.4.4Cyrus Imap 2.4.12Cyrus Imap 2.4.13Cyrus Imap 2.5.2Cyrus Imap 2.5.3Cyrus Imap 2.3.1Cyrus Imap 2.3.2Cyrus Imap 2.3.10Cyrus Imap 2.3.11Cyrus Imap 2.3.18Cyrus Imap 2.4.0Cyrus Imap 2.4.7Cyrus Imap 2.4.8Cyrus Imap 2.4.16Cyrus Imap 2.4.17Cyrus Imap 2.3.3Cyrus Imap 2.3.4Cyrus Imap 2.3.12Cyrus Imap 2.3.13Cyrus Imap 2.4.1Cyrus Imap 2.4.2Cyrus Imap 2.4.9Cyrus Imap 2.4.10Cyrus Imap 2.4.11Cyrus Imap 2.5.0Cyrus Imap 2.5.1Opensuse Opensuse 13.2Opensuse Leap 42.1
NA
CVE-2011-1926
The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a...
Cmu Cyrus Imap Server 2.4.2Cmu Cyrus Imap Server 2.4.1Cmu Cyrus Imap Server 2.4.0Cmu Cyrus Imap Server 2.3.3Cmu Cyrus Imap Server 2.3.2Cmu Cyrus Imap Server 2.3.1Cmu Cyrus Imap Server 2.3.0Cmu Cyrus Imap Server 2.1.16Cmu Cyrus Imap Server 2.3.11Cmu Cyrus Imap Server 2.0.17Cmu Cyrus Imap ServerCmu Cyrus Imap Server 2.4.5Cmu Cyrus Imap Server 2.3.7Cmu Cyrus Imap Server 2.3.6Cmu Cyrus Imap Server 2.3.12Cmu Cyrus Imap Server 2.2.12Cmu Cyrus Imap Server 2.2.11Cmu Cyrus Imap Server 2.3.16Cmu Cyrus Imap Server 2.3.14Cmu Cyrus Imap Server 2.2.13Cmu Cyrus Imap Server 2.3.9Cmu Cyrus Imap Server 2.3.8Cmu Cyrus Imap Server 2.3.15Cmu Cyrus Imap Server 2.3.13Cmu Cyrus Imap Server 2.2.9Cmu Cyrus Imap Server 2.2.8Cmu Cyrus Imap Server 2.1.18Cmu Cyrus Imap Server 2.2.13p1Cmu Cyrus Imap Server 2.4.4Cmu Cyrus Imap Server 2.4.3Cmu Cyrus Imap Server 2.3.5Cmu Cyrus Imap Server 2.3.4Cmu Cyrus Imap Server 2.3.10Cmu Cyrus Imap Server 2.2.10Cmu Cyrus Imap Server 2.1.17
NA
CVE-2011-3481
The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message....
Cmu Cyrus Imap Server 2.3.13Cmu Cyrus Imap Server 2.3.9Cmu Cyrus Imap Server 2.3.7Cmu Cyrus Imap Server 2.3.8Cmu Cyrus Imap Server 2.4.8Cmu Cyrus Imap Server 2.0.17Cmu Cyrus Imap Server 2.2.9Cmu Cyrus Imap Server 2.2.8Cmu Cyrus Imap ServerCmu Cyrus Imap Server 2.3.17Cmu Cyrus Imap Server 2.3.15Cmu Cyrus Imap Server 2.3.2Cmu Cyrus Imap Server 2.4.9Cmu Cyrus Imap Server 2.4.0Cmu Cyrus Imap Server 2.1.16Cmu Cyrus Imap Server 2.4.7Cmu Cyrus Imap Server 2.3.1Cmu Cyrus Imap Server 2.3.0Cmu Cyrus Imap Server 2.3.14Cmu Cyrus Imap Server 2.3.16Cmu Cyrus Imap Server 2.3.12Cmu Cyrus Imap Server 2.3.5Cmu Cyrus Imap Server 2.3.6Cmu Cyrus Imap Server 2.1.18Cmu Cyrus Imap Server 2.2.13p1Cmu Cyrus Imap Server 2.3.10Cmu Cyrus Imap Server 2.2.12Cmu Cyrus Imap Server 2.2.11Cmu Cyrus Imap Server 2.4.4Cmu Cyrus Imap Server 2.4.6Cmu Cyrus Imap Server 2.3.3Cmu Cyrus Imap Server 2.3.4Cmu Cyrus Imap Server 2.4.1Cmu Cyrus Imap Server 2.4.2Cmu Cyrus Imap Server 2.2.10Cmu Cyrus Imap Server 2.1.17Cmu Cyrus Imap Server 2.2.13Cmu Cyrus Imap Server 2.3.11Cmu Cyrus Imap Server 2.4.5Cmu Cyrus Imap Server 2.4.3
NA
CVE-2011-3208
Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command....
Cmu Cyrus Imap Server 2.0.17Cmu Cyrus Imap Server 2.1.16Cmu Cyrus Imap Server 2.2.11Cmu Cyrus Imap Server 2.2.9Cmu Cyrus Imap Server 2.3.1Cmu Cyrus Imap Server 2.3.0Cmu Cyrus Imap Server 2.3.11Cmu Cyrus Imap Server 2.1.17Cmu Cyrus Imap Server 2.1.18Cmu Cyrus Imap Server 2.2.10Cmu Cyrus Imap Server 2.2.8Cmu Cyrus Imap Server 2.3.15Cmu Cyrus Imap Server 2.3.13Cmu Cyrus Imap Server 2.3.9Cmu Cyrus Imap Server 2.3.10Cmu Cyrus Imap Server 2.3.14Cmu Cyrus Imap Server 2.2.14Cmu Cyrus Imap Server 2.2.12Cmu Cyrus Imap Server 2.3.4Cmu Cyrus Imap Server 2.3.12Cmu Cyrus Imap Server 2.3.7Cmu Cyrus Imap Server 2.3.8Cmu Cyrus Imap Server 2.2.13p1Cmu Cyrus Imap Server 2.2.13Cmu Cyrus Imap Server 2.3.2Cmu Cyrus Imap Server 2.3.3Cmu Cyrus Imap Server 2.3.5Cmu Cyrus Imap Server 2.3.6Cmu Cyrus Imap ServerCmu Cyrus Imap Server 2.4.0Cmu Cyrus Imap Server 2.4.1Cmu Cyrus Imap Server 2.4.6Cmu Cyrus Imap Server 2.4.2Cmu Cyrus Imap Server 2.4.7Cmu Cyrus Imap Server 2.4.10Cmu Cyrus Imap Server 2.4.9Cmu Cyrus Imap Server 2.4.3Cmu Cyrus Imap Server 2.4.4Cmu Cyrus Imap Server 2.4.8Cmu Cyrus Imap Server 2.4.5
NA
CVE-2007-2173
Eval injection vulnerability in (1) courier-imapd.indirect and (2) courier-pop3d.indirect in Courier-IMAP before 4.0.6-r2, and 4.1.x before 4.1.2-r1, on Gentoo Linux allows remote attackers to execute arbitrary commands via the XMAILDIR variable, related to the LOGINRUN variable....
Double Precision Incorporated Courier-imap 4.0.0Double Precision Incorporated Courier-imap 4.0.1Double Precision Incorporated Courier-imap 4.1.0Double Precision Incorporated Courier-imap 4.1.1Double Precision Incorporated Courier-imap 4.0.2Double Precision Incorporated Courier-imap 4.0.3Double Precision Incorporated Courier-imap 4.0.4Double Precision Incorporated Courier-imap 4.0.5
NA
CVE-2015-8078
Integer overflow in the index_urlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the section_offset variable. NOTE: this vulnerability exists because of an...
Opensuse Opensuse 13.2Opensuse Leap 42.1Cyrus Imap 2.3.1Cyrus Imap 2.3.2Cyrus Imap 2.3.10Cyrus Imap 2.3.11Cyrus Imap 2.3.18Cyrus Imap 2.4.0Cyrus Imap 2.4.7Cyrus Imap 2.4.8Cyrus Imap 2.4.9Cyrus Imap 2.4.16Cyrus Imap 2.4.17Cyrus Imap 2.3.0Cyrus Imap 2.3.8Cyrus Imap 2.3.9Cyrus Imap 2.3.16Cyrus Imap 2.3.17Cyrus Imap 2.4.5Cyrus Imap 2.3.3Cyrus Imap 2.3.4Cyrus Imap 2.3.5Cyrus Imap 2.3.12Cyrus Imap 2.3.13Cyrus Imap 2.4.1Cyrus Imap 2.4.2Cyrus Imap 2.4.10Cyrus Imap 2.4.11Cyrus Imap 2.5.0Cyrus Imap 2.5.1Cyrus Imap 2.4.6Cyrus Imap 2.4.14Cyrus Imap 2.4.15Cyrus Imap 2.3.6Cyrus Imap 2.3.7Cyrus Imap 2.3.14Cyrus Imap 2.3.15Cyrus Imap 2.4.3Cyrus Imap 2.4.4Cyrus Imap 2.4.12Cyrus Imap 2.4.13Cyrus Imap 2.5.2Cyrus Imap 2.5.3
NA
CVE-2004-1035
Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select.c for up-imapproxy IMAP proxy 1.2.2 allow remote attackers to cause a denial of service (server crash) and possibly leak sensitive information via certain literal values that are...
Imap Proxy Imap Proxy 1.2.2
NA
CVE-2004-1013
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment...
Carnegie Mellon University Cyrus Imap Server 2.1.7Carnegie Mellon University Cyrus Imap Server 2.1.9Carnegie Mellon University Cyrus Imap Server 2.2.7Carnegie Mellon University Cyrus Imap Server 2.2.8Carnegie Mellon University Cyrus Imap Server 2.1.10Carnegie Mellon University Cyrus Imap Server 2.1.16Carnegie Mellon University Cyrus Imap Server 2.2.5Carnegie Mellon University Cyrus Imap Server 2.2.6Carnegie Mellon University Cyrus Imap Server 2.2.2 BetaCarnegie Mellon University Cyrus Imap Server 2.2.3Carnegie Mellon University Cyrus Imap Server 2.2.4Conectiva Linux 9.0Carnegie Mellon University Cyrus Imap Server 2.2.0 AlphaCarnegie Mellon University Cyrus Imap Server 2.2.1 BetaOpenpkg Openpkg CurrentConectiva Linux 10.0Trustix Secure Linux 2.0Trustix Secure Linux 2.1Redhat Fedora Core Core 2.0Redhat Fedora Core Core 3.0Ubuntu Ubuntu Linux 4.1Trustix Secure Linux 2.2
NA
CVE-2001-1154
Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients....
Carnegie Mellon University Cyrus Imap Server 1.6.24Carnegie Mellon University Cyrus Imap Server 2.0.15Carnegie Mellon University Cyrus Imap Server 2.0.16Bsdi Bsd Os 4.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site request forgeryCVE-2022-24025SSRFCVE-2022-37451CVE-2022-24022CVE-2022-1215brute forceCVE-2022-29582CVE-2022-36834
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook