Lucene search
Ubuntu.comUB:CVE-2011-1926HistoryMay 23, 2011 - 12:00 a.m.
CVE-2011-1926
2011-05-2300:00:00
ubuntu.com
ubuntu.com
15
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.1%
The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not
properly restrict I/O buffering, which allows man-in-the-middle attackers
to insert commands into encrypted sessions by sending a cleartext command
that is processed after TLS is in place, related to a “plaintext command
injection” attack, a similar issue to CVE-2011-0411.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | cyrus-imapd-2.2 | < 2.2.13-19squeeze1build0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | cyrus-imapd-2.2 | < 2.2.13-19squeeze1build0.10.10.1 | UNKNOWN |
Related
openvas
openvas
Mandriva Update for cyrus-imapd MDVSA-2011:100 (cyrus-imapd)
2011-06-03 00:00:00
Mandriva Update for cyrus-imapd MDVSA-2011:100 (cyrus-imapd)
2011-06-03 00:00:00
CentOS Update for cyrus-imapd CESA-2011:0859 centos4 x86_64
2012-07-30 00:00:00
nessus
nessus
Mandriva Linux Security Advisory : cyrus-imapd (MDVSA-2011:100)
2011-05-25 00:00:00
RHEL 4 / 5 / 6 : cyrus-imapd (RHSA-2011:0859)
2011-06-09 00:00:00
IMAP Service STARTTLS Plaintext Command Injection
2011-03-10 00:00:00
prion
prion
Command injection
2011-05-23 22:55:00
Command injection
2011-03-16 22:55:00
Command injection
2011-03-16 22:55:00
securityvulns
securityvulns
[ MDVSA-2011:100 ] cyrus-imapd
2011-05-25 00:00:00
STARTTLS vulnerability in different mail applications
2012-10-04 00:00:00
Plaintext injection in STARTTLS (multiple implementations)
2011-03-10 00:00:00
cve
cve
fedora
fedora
[SECURITY] Fedora 13 Update: cyrus-imapd-2.3.16-5.fc13
2011-06-11 04:34:18
[SECURITY] Fedora 14 Update: cyrus-imapd-2.3.16-8.fc14
2011-06-11 04:24:35
[SECURITY] Fedora 14 Update: pure-ftpd-1.0.30-1.fc14
2011-03-31 16:59:13
oraclelinux
oraclelinux
cyrus-imapd security update
2011-06-08 00:00:00
postfix security update
2011-04-06 00:00:00
postfix security update
2011-04-06 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2020-04-10 01:03:51
Command Injection
2020-04-10 00:54:06
debian
debian
[SECURITY] [DSA 2242-1] cyrus-imapd-2.2 security update
2011-05-25 19:56:25
[SECURITY] [DSA 2258-1] kolab-cyrus-imapd security update
2011-06-11 16:51:16
[SECURITY] [DSA 2346-1] proftpd-dfsg security update
2011-11-15 20:39:09
redhat
redhat
(RHSA-2011:0859) Moderate: cyrus-imapd security update
2011-06-08 00:00:00
(RHSA-2011:0423) Moderate: postfix security update
2011-04-06 00:00:00
(RHSA-2011:0422) Moderate: postfix security update
2011-04-06 00:00:00
centos
centos
cyrus, perl security update
2011-06-08 20:42:26
postfix security update
2011-04-08 12:13:18
freebsd
freebsd
postfix -- plaintext command injection with SMTP over TLS
2011-03-07 00:00:00
inn -- plaintext command injection into encrypted channel
2012-08-14 00:00:00
pureftpd -- multiple vulnerabilities
2011-04-01 00:00:00
ubuntucve
ubuntucve
debiancve
debiancve
hackerone
hackerone
PortSwigger Web Security: SMTP interaction theft via MITM
2020-08-07 11:29:14
osv
osv
proftpd-dfsg - several
2011-11-16 00:00:00
proftpd-dfsg - several
2011-11-16 00:00:00
postfix - several
2011-05-10 00:00:00
ubuntu
ubuntu
Postfix vulnerabilities
2011-04-18 00:00:00
checkpoint_advisories
checkpoint_advisories
gentoo
gentoo
Postfix: Multiple vulnerabilities
2012-06-25 00:00:00
cert
cert
STARTTLS plaintext command injection vulnerability
2011-03-07 00:00:00
kitploit
kitploit
Vision2 - Nmap's XML result parse and NVD's CPE correlation to search CVE
2017-09-08 13:30:00
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.1%
Related for UB:CVE-2011-1926