Cyrus IMAP Server: Access restriction bypass

Background The Cyrus IMAP Server is an efficient, highly-scalable IMAP e-mail server. Description An issue was discovered in Cyrus IMAP Server where sieve script uploading is excessively trusted. Impact A user can use a sieve script to create any mailbox with administrator privileges. Workaround...

Cyrus IMAP index_urlfetch信息泄露漏洞

受影响系统： cyrus Cyrus IMAP Server 2.5.x-2.5.4 cyrus Cyrus IMAP Server 2.4.x-2.4.18 cyrus Cyrus IMAP Server 2.3.x-2.3.19 漏洞详情： CVECAN ID: CVE-2015-8076 Cyrus IMAP服务器是卡耐基梅隆大学开发的电子邮件服务器。 Cyrus IMAP 2.3.x-2.3.19, 2.4.x-2.4.18, 2.5.x-2.5.4...

[SECURITY] Fedora 21 Update: cyrus-imapd-2.4.18-1.fc21

The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...

[SECURITY] Fedora 22 Update: cyrus-imapd-2.4.18-1.fc22

The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...

[SECURITY] Fedora 23 Update: cyrus-imapd-2.4.18-1.fc23

The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...

Mandriva Update for cyrus-imapd MDVSA-2012:037 (cyrus-imapd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 201110-16 (Cyrus IMAP Server)

The remote host is missing updates announced in advisory GLSA 201110-16. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Gentoo Security Advisory GLSA 201110-16 (Cyrus IMAP Server)

The remote host is missing updates announced in advisory GLSA 201110-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-201110-16 : Cyrus IMAP Server: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201110-16 Cyrus IMAP Server: Multiple vulnerabilities Multiple vulnerabilities have been discovered in the Cyrus IMAP Server. Please review the CVE identifiers referenced below for details. Impact : An unauthenticated local or...

Cyrus IMAP Server: Multiple vulnerabilities

Background The Cyrus IMAP Server is an efficient, highly-scalable IMAP e-mail server. Description Multiple vulnerabilities have been discovered in the Cyrus IMAP Server. Please review the CVE identifiers referenced below for details. Impact An unauthenticated local or remote attacker may be able ...

[SECURITY] Fedora 15 Update: cyrus-imapd-2.4.12-1.fc15

The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based internet mail technologies. A full Cyrus IMAP implementation allows a seamless mail and bulletin board...

CVE-2011-3208

Stack-based buffer overflow in the splitwildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command...

CVE-2011-3481

The indexgetids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted References header in an e-mail message...

Null pointer dereference

The indexgetids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted References header in an e-mail message...

CVE-2011-3208

Stack-based buffer overflow in the splitwildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command...

Stack overflow

Stack-based buffer overflow in the splitwildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command...

CVE-2011-3208

Stack-based buffer overflow in the splitwildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command...

CVE-2011-3481

CVE-2011-3481 affects Cyrus IMAP Server’s imapd prior to 2.4.11. When server-side threading is enabled, the index_get_ids function can be triggered by a crafted References header in an email to cause a NULL pointer dereference and daemon crash (DoS). The vulnerability is tied to the IMAP server c...

CVE-2011-3208

CVE-2011-3208 : Stack-based buffer overflow in the split_wildmats function of nntpd.c in the Cyrus IMAP Server’s nntpd. Remote attackers could execute arbitrary code via a crafted NNTP command. Affected products/versions: Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11. Impact: potential ...

Debian Security Advisory DSA 2242-1 (cyrus-imapd-2.2)

The remote host is missing an update to cyrus-imapd-2.2 announced via advisory DSA 2242-1. OpenVAS Vulnerability Test $Id: deb22421.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2242-1 cyrus-imapd-2.2 Authors: Thomas Reinke Copyright: Copyright c 2011...