Red Hat Security AdvisoryRHSA-2009:1459
cyrus-imapd security update
Released 2009-09-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) cyrus-imapd-2.3.7-7.el5_4.3, cyrus-imapd-2.3.7-7.el5_4.3.i386, cyrus-imapd-2.3.7-7.el5_4.3.ia64 +13
- Red Hat Enterprise Linux AS version 4 cyrus-imapd-2.2.12-10.el4_8.4, cyrus-imapd-2.2.12-10.el4_8.4.i386, cyrus-imapd-2.2.12-10.el4_8.4.ia64 +21
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) cyrus-imapd-2.3.7-7.el5_4.3, cyrus-imapd-2.3.7-7.el5_4.3.i386, cyrus-imapd-devel-2.3.7-7.el5_4.3 +5
- Red Hat Enterprise Linux Desktop version 4 cyrus-imapd-2.2.12-10.el4_8.4, cyrus-imapd-2.2.12-10.el4_8.4.i386, cyrus-imapd-devel-2.2.12-10.el4_8.4 +9
- Red Hat Enterprise Linux ES version 4 cyrus-imapd-2.2.12-10.el4_8.4, cyrus-imapd-2.2.12-10.el4_8.4.i386, cyrus-imapd-2.2.12-10.el4_8.4.ia64 +15
- Red Hat Enterprise Linux WS version 4 cyrus-imapd-2.2.12-10.el4_8.4, cyrus-imapd-2.2.12-10.el4_8.4.i386, cyrus-imapd-2.2.12-10.el4_8.4.ia64 +15
Fixes 2 records
Priority MEDIUM 40
Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possi…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0404 · Published 2009-09-17 · Fixed CWE-119
Priority LOW 21
Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and 2.3.14, and Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, allows local users to execute arbitrary co…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00483 · Published 2009-09-08 · Fixed CWE-119
