Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-2632
HistorySep 08, 2009 - 11:30 p.m.

CVE-2009-2632

2009-09-0823:30:00
CWE-119
[email protected]
web.nvd.nist.gov
38
cve-2009-2632
buffer overflow
sieve script
cyrus imap server
dovecot
arbitrary code execution
integer signedness error

7.1 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.6%

JSON

Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary code and read or modify arbitrary messages via a crafted SIEVE script, related to the incorrect use of the sizeof operator for determining buffer length, combined with an integer signedness error.

References

Related

nessus 21
fedora 1
openvas 40
cert 1
veracode 1
debiancve 2
prion 2
ubuntucve 2
freebsd 1
debian 5
oraclelinux 1
redhat 1
osv 1
cve 1
centos 1
gentoo 1
ubuntu 1
threatpost 1
nessus
nessus
Debian DSA-1881-1 : cyrus-imapd-2.2 - buffer overflow
2010-02-24 00:00:00
Mandriva Linux Security Advisory : cyrus-imapd (MDVSA-2009:229-1)
2009-09-14 00:00:00
FreeBSD : cyrus-imapd -- Potential buffer overflow in Sieve (012b495c-9d51-11de-8d20-001bd3385381)
2009-09-10 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: dovecot-1.1.18-2.fc10
2009-09-15 07:41:57
openvas
openvas
Debian: Security Advisory (DSA-1881-1)
2009-09-15 00:00:00
Fedora Core 10 FEDORA-2009-9559 (dovecot)
2009-09-15 00:00:00
FreeBSD Ports: cyrus-imapd
2009-09-15 00:00:00
cert
cert
Cyrus IMAPd buffer overflow vulnerability
2009-09-09 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:38:24
debiancve
debiancve
CVE-2009-2632
2009-09-08 23:30:00
CVE-2009-3235
2009-09-17 10:30:00
prion
prion
Integer overflow
2009-09-08 23:30:00
Stack overflow
2009-09-17 10:30:00
ubuntucve
ubuntucve
CVE-2009-2632
2009-09-08 00:00:00
CVE-2009-3235
2009-09-17 00:00:00
freebsd
freebsd
cyrus-imapd -- Potential buffer overflow in Sieve
2009-09-02 00:00:00
debian
debian
[Backports-security-announce] Security update for dovecot
2009-10-01 18:15:41
[SECURITY] [DSA 1893-1] New cyrus-imapd-2.2/kolab-cyrus-imapd packages fix arbitrary code execution
2009-09-23 16:36:30
[Backports-security-announce] Security update for dovecot
2009-10-01 18:22:42
oraclelinux
oraclelinux
cyrus-imapd security update
2009-09-23 00:00:00
redhat
redhat
(RHSA-2009:1459) Important: cyrus-imapd security update
2009-09-23 00:00:00
osv
osv
dovecot - arbitrary code execution
2009-09-23 00:00:00
cve
cve
CVE-2009-3235
2009-09-17 10:30:00
centos
centos
cyrus, perl security update
2009-09-26 00:34:20
gentoo
gentoo
Cyrus IMAP Server: Multiple vulnerabilities
2011-10-22 00:00:00
ubuntu
ubuntu
Dovecot vulnerabilities
2009-09-28 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

7.1 High

AI Score

Confidence

Low

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.6%

JSON
Related for CVE-2009-2632
nessus21fedora1openvas40cert1veracode1debiancve2prion2ubuntucve2freebsd1debian5oraclelinux1redhat1osv1cve1centos1gentoo1ubuntu1threatpost1