Published: 14/06/2004 Updated: 11/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote malicious users to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.

Vulnerable Product	Search on Vulmon	Subscribe to Product
carnegie mellon university cyrus imap server 2.0.12
carnegie mellon university cyrus imap server 2.0.16
carnegie mellon university cyrus imap server 2.1.10
carnegie mellon university cyrus imap server 2.1.9
carnegie mellon university cyrus imap server 1.4
carnegie mellon university cyrus imap server 1.5.19

Timo Sirainen discovered a buffer overflow in the Cyrus IMAP server, which could be exploited by a remote attacker prior to logging in A malicious user could craft a request to run commands on the server under the UID and GID of the cyrus server For the current stable distribution (woody) this problem has been fixed in version 1519-91 For the ...

source: wwwsecurityfocuscom/bid/6298/info Cyrus IMAPD is a freely available, open source Interactive Mail Access Protocol (IMAP) daemon It is available for Unix and Linux operating systems It has been reported that Cyrus IMAPD does not sufficiently handle overly long strings In some cases, when a user connects to the daemon, and upon ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/301864 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000557 http://www.kb.cert.org/vuls/id/740169 http://www.securityfocus.com/bid/6298 http://www.debian.org/security/2002/dsa-215 http://asg.web.cmu.edu/cyrus/download/imapd/changes.html http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557 https://exchange.xforce.ibmcloud.com/vulnerabilities/10744 https://nvd.nist.gov https://www.debian.org/security/./dsa-215 https://www.exploit-db.com/exploits/22061/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1580

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect