Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2005-0546

Published: 02/05/2005 Updated: 19/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Cyrus

Vulnerability Summary

Multiple buffer overflows in Cyrus IMAPd prior to 2.2.11 may allow malicious users to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.

Vulnerable Product Search on Vulmon Subscribe to Product

cyrus imapd 2.0.17

cyrus imapd 2.1.16

cyrus imapd 2.1.17

cyrus imapd 2.1.18

cyrus imapd 2.2.10

Vendor Advisories

Red Hat: cyrus-imapd security update
Synopsis cyrus-imapd security update Type/Severity Security Advisory: Moderate Topic Updated cyrus-imapd packages that fix several buffer overflow securityissues are now availableThis update has been rated as having moderate security impact by the RedHat Security Response Team Description ...
Ubuntu Security Notice: cyrus21-imapd vulnerability
Sean Larsson discovered a buffer overflow in the IMAP “annotate” extension This possibly allowed an authenticated IMAP client to execute arbitrary code with the privileges of the Cyrus IMAP server ...

References

NVD-CWE-Otherhttp://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000937http://security.gentoo.org/glsa/glsa-200502-29.xmlhttp://bugs.gentoo.org/show_bug.cgi?id=82404http://secunia.com/advisories/14383http://securitytracker.com/id?1013278http://www.redhat.com/support/errata/RHSA-2005-408.htmlhttp://www.mandriva.com/security/advisories?name=MDKSA-2005:051http://www.securityfocus.com/bid/12636http://marc.info/?l=bugtraq&m=110972236203397&w=2https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10674http://www.securityfocus.com/archive/1/430294/100/0/threadedhttps://access.redhat.com/errata/RHSA-2005:408https://usn.ubuntu.com/87-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook