Vulnerability of the Cyrus IMAP mail server and operating systems openSUSE and OpenSUSE Leap, allowing attackers to compromise the integrity and accessibility of protected information

The vulnerability of the indexurlfetch function imap/index.c in the Cyrus IMAP server and on the OpenSUSE and OpenSUSE Leap operating systems is caused by a numerical overflow issue. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected...

The vulnerability of the Cyrus IMAP mail server and the OpenSUSE and OpenSUSE Leap operating systems allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the indexurlfetch function imap/index.c in the Cyrus IMAP server is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information by using the UrlFetch function and the...

Cyrus IMAP index_urlfetch integer overflow vulnerability (CNVD-2015-07902)

Cyrus IMAP Server is an e-mail server developed at Carnegie Mellon University. An integer overflow vulnerability exists in the function indexurlfetch in Cyrus IMAP versions 2.3.19, 2.4.18, and 2.5.6 of imap/index.c, which can be exploited by a remote attacker to perform an illegal operation via a...

Cyrus IMAP index_urlfetch integer overflow vulnerability (CNVD-2015-07903)

Cyrus IMAP Server is an e-mail server developed at Carnegie Mellon University. An integer overflow vulnerability exists in the function indexurlfetch in Cyrus IMAP versions 2.3.19, 2.4.18, and 2.5.6 of imap/index.c, which can be exploited by a remote attacker to perform an illegal operation via a...

UBUNTU-CVE-2015-8076

The indexurlfetch function in index.c in Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, 2.5.x before 2.5.4 allows remote attackers to obtain sensitive information or possibly have unspecified other impact via vectors related to the urlfetch range, which triggers an out-of-bounds heap read...

UBUNTU-CVE-2015-8077

Integer overflow in the indexurlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the startoctet variable. NOTE: this vulnerability exists because of an incomplete fix for...

Integer overflow

Integer overflow in the indexurlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the startoctet variable. NOTE: this vulnerability exists because of an incomplete fix for...

UBUNTU-CVE-2015-8078

Integer overflow in the indexurlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the sectionoffset variable. NOTE: this vulnerability exists because of an incomplete fix for...

Integer overflow

Integer overflow in the indexurlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the sectionoffset variable. NOTE: this vulnerability exists because of an incomplete fix for...

CVE-2015-8077

Integer overflow in the indexurlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the startoctet variable. NOTE: this vulnerability exists because of an incomplete fix for...

CVE-2015-8078

Integer overflow in the indexurlfetch function in imap/index.c in Cyrus IMAP 2.3.19, 2.4.18, and 2.5.6 allows remote attackers to have unspecified impact via vectors related to urlfetch range checks and the sectionoffset variable. NOTE: this vulnerability exists because of an incomplete fix for...

cyrus-imapd -- integer overflow in the start_octet addition

Cyrus IMAP 2.5.7 Release Note states: CVE-2015-8077, CVE-2015-8078: protect against integer overflow in urlfetch range checks...

Updated cyrus-imapd packages fix security vulnerabilities

Updated cyrus-imapd packages fix security vulnerability: The cyrus-imapd package has been updated to version 2.4.18, fixing a security issue with a urlfetch range starting outside the message range, as well as several other bugs. See the upstream release announcement for details...

PT-2015-7929

Name of the Vulnerable Software and Affected Versions cyrus-imapd versions prior to 2.4.18 Description A security issue exists with a urlfetch range starting outside the message range, along with several other bugs. Recommendations For versions prior to 2.4.18, update to version 2.4.18 to resolve...

PT-2015-3149

Name of the Vulnerable Software and Affected Versions Cyrus IMAP versions 2.3.19 through 2.5.6 Description The issue is caused by an integer overflow in the index urlfetch function in imap/index.c, which can be exploited by remote attackers to have an unspecified impact. This is related to urlfet...

PT-2015-3147

Name of the Vulnerable Software and Affected Versions Cyrus IMAP versions 2.3.x through 2.3.18 Cyrus IMAP versions 2.4.x through 2.4.17 Cyrus IMAP versions 2.5.x through 2.5.3 Description The issue is caused by an out-of-bounds heap read in the index urlfetch function. This can allow a remote...

PT-2015-3148

Name of the Vulnerable Software and Affected Versions Cyrus IMAP versions 2.3.19 through 2.5.6 Description The issue is caused by an integer overflow in the index urlfetch function in imap/index.c, which can be exploited by remote attackers to have an unspecified impact. This is related to urlfet...