Red Hat Security AdvisoryRHSA-2011:1317
cyrus-imapd security update
Released 2011-09-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) cyrus-imapd-2.3.7-12.el5_7.1, cyrus-imapd-2.3.7-12.el5_7.1.i386, cyrus-imapd-devel-2.3.7-12.el5_7.1 +5
- Red Hat Enterprise Linux (v. 5 server) cyrus-imapd-2.3.7-12.el5_7.1, cyrus-imapd-2.3.7-12.el5_7.1.i386, cyrus-imapd-2.3.7-12.el5_7.1.ia64 +13
- Red Hat Enterprise Linux AS version 4 cyrus-imapd-2.2.12-16.el4, cyrus-imapd-2.2.12-16.el4.i386, cyrus-imapd-2.2.12-16.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 cyrus-imapd-2.2.12-16.el4, cyrus-imapd-2.2.12-16.el4.i386, cyrus-imapd-devel-2.2.12-16.el4 +9
- Red Hat Enterprise Linux ES version 4 cyrus-imapd-2.2.12-16.el4, cyrus-imapd-2.2.12-16.el4.i386, cyrus-imapd-2.2.12-16.el4.ia64 +15
- Red Hat Enterprise Linux Server (v. 6) cyrus-imapd-2.3.16-6.el6_1.3, cyrus-imapd-utils-2.3.16-6.el6_1.3
- Red Hat Enterprise Linux Server Optional (v. 6) cyrus-imapd-2.3.16-6.el6_1.3, cyrus-imapd-devel-2.3.16-6.el6_1.3, cyrus-imapd-devel-2.3.16-6.el6_1.3.ppc
- Red Hat Enterprise Linux WS version 4 cyrus-imapd-2.2.12-16.el4, cyrus-imapd-2.2.12-16.el4.i386, cyrus-imapd-2.2.12-16.el4.ia64 +15
Fixes 1 record
Priority MEDIUM 41
Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05365 · Published 2011-09-14 · Fixed CWE-119
