Mandriva Linux Security Advisory : cyrus-imapd (MDVSA-2012:037)

A vulnerability has been found and corrected in cyrus-imapd : The indexgetids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted...

Gentoo Security Advisory GLSA 201110-16 (Cyrus IMAP Server)

The remote host is missing updates announced in advisory GLSA 201110-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 201110-16 (Cyrus IMAP Server)

The remote host is missing updates announced in advisory GLSA 201110-16. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Debian Security Advisory DSA 2377-1 (cyrus-imapd-2.2)

The remote host is missing an update to cyrus-imapd-2.2 announced via advisory DSA 2377-1. OpenVAS Vulnerability Test $Id: deb23771.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2377-1 cyrus-imapd-2.2 Authors: Thomas Reinke Copyright: Copyright c 2012...

Debian: Security Advisory (DSA-2377-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Anfibia Remote Command Execution

Exploit Title: Anfibia Remote Command Execution RCE Vulnerability Date: 2012-02-03 GMT +7 Author: BHG Security Center Discovered : Nitrojen90 Software Link: http://www.anfibia.com.br/ Dork: intext:"/op1.txt" "command" filetype:php Tested on: ubuntu 11.04 CVE : -...

Debian DSA-2377-1 : cyrus-imapd-2.2 - NULL pointer dereference

It was discovered that cyrus-imapd, a highly scalable mail system designed for use in enterprise environments, is not properly parsing mail headers when a client makes use of the IMAP threading feature. As a result, a NULL pointer is dereferenced which crashes the daemon. An attacker can trigger...

[SECURITY] [DSA 2377-1] cyrus-imapd-2.2 security update

--------------------------------------------------------------------------- Debian Security Advisory DSA-2377-1 [email protected] http://www.debian.org/security/ Nico Golde Jan 1st, 2012 http://www.debian.org/security/faq -...

DSA-2377-1 cyrus-imapd-2.2 - denial of service

Bulletin has no description...

CVE-2011-3372

imap/nntpd.c in the NNTP server nntpd for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command...

Authentication flaw

imap/nntpd.c in the NNTP server nntpd for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command...

CVE-2011-3372

imap/nntpd.c in the NNTP server nntpd for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command...

CVE-2011-3372

imap/nntpd.c in the NNTP server nntpd for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command...

CVE-2011-3372

CVE-2011-3372 affects Cyrus IMAPd 2.4.x NNTP server (nntpd): remote attackers can bypass authentication by sending AUTHINFO USER without a subsequent AUTHINFO PASS. The issue is fixed in Cyrus IMAPd 2.4.12 and in various advisories (e.g., MiracleLinux AXSA-2012-23) that reference CVE-2011-3372. A...

Cyrus IMAPd NNTP AUTHINFO USER Command Parsing Authentication Bypass

The remote NNTP server contains a logic error that causes clients that send only a username, neglecting to send a password, to be treated as authenticated. This may permit an unauthenticated, remote attacker to view and post to restricted newsgroups, impersonating other users in the process. C...

SuSE 10 Security Update : cyrus-imapd (ZYPP Patch Number 7727)

This update of cyrus-imapd fixes a buffer overflow that could potentially be exploited by remote attackers to cause a crash or run arbitrary code. CVE-2011-3208 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : cyrus-imapd (ZYPP Patch Number 7785)

An authentication bypass CVE-2011-3372 and a DoS vulnerability CVE-2011-3481 have been fixed in the Cyrus IMAPd nntpd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 11.1 Security Update : cyrus-imapd (SAT Patch Number 5233)

An authentication bypass CVE-2011-3372 and a DoS vulnerability CVE-2011-3481 have been fixed in the Cyrus IMAPd nntpd. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11.1 Security Update : cyrus-imapd (SAT Patch Number 5096)

This update of cyrus-imapd fixes a buffer overflow that could potentially be exploited by remote attackers to cause a crash or run arbitrary code. CVE-2011-3208 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

SuSE 10 Security Update : cyrus-imapd (ZYPP Patch Number 7583)

Cyrus-imapd recognized commands before switching to an encrypted channel via STARTTLS. Attackers could potentially exploit that to inject plain text commands. CVE-2011-1926 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...