SUSE CVE-2017-12843

Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted 1 SYNCAPPLY, 2 SYNCGET or 3 SYNCRESTORE command...

CVE-2017-12843

CVE-2017-12843 affects Cyrus IMAP before 3.0.3. Remote authenticated users can write to arbitrary files using crafted SYNCAPPLY, SYNCGET, or SYNCRESTORE commands. Severity is MEDIUM (CVSSv3: 6.5) with high impact on integrity. Affected product: Cyrus IMAP server; vulnerable component: IMAP comman...