Red Hat Security AdvisoryRHSA-2011:1508
cyrus-imapd security update
Released 2011-12-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) cyrus-imapd-2.3.7-12.el5_7.2, cyrus-imapd-2.3.7-12.el5_7.2.i386, cyrus-imapd-devel-2.3.7-12.el5_7.2 +5
- Red Hat Enterprise Linux (v. 5 server) cyrus-imapd-2.3.7-12.el5_7.2, cyrus-imapd-2.3.7-12.el5_7.2.i386, cyrus-imapd-2.3.7-12.el5_7.2.ia64 +13
- Red Hat Enterprise Linux AS version 4 cyrus-imapd-2.2.12-17.el4, cyrus-imapd-2.2.12-17.el4.i386, cyrus-imapd-2.2.12-17.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 cyrus-imapd-2.2.12-17.el4, cyrus-imapd-2.2.12-17.el4.i386, cyrus-imapd-devel-2.2.12-17.el4 +9
- Red Hat Enterprise Linux ES version 4 cyrus-imapd-2.2.12-17.el4, cyrus-imapd-2.2.12-17.el4.i386, cyrus-imapd-2.2.12-17.el4.ia64 +15
- Red Hat Enterprise Linux Server (v. 6) cyrus-imapd-2.3.16-6.el6_1.4, cyrus-imapd-utils-2.3.16-6.el6_1.4
- Red Hat Enterprise Linux Server Optional (v. 6) cyrus-imapd-2.3.16-6.el6_1.4, cyrus-imapd-devel-2.3.16-6.el6_1.4, cyrus-imapd-devel-2.3.16-6.el6_1.4.ppc
- Red Hat Enterprise Linux WS version 4 cyrus-imapd-2.2.12-17.el4, cyrus-imapd-2.2.12-17.el4.i386, cyrus-imapd-2.2.12-17.el4.ia64 +15
Fixes 2 records
Priority LOW 39
imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03289 · Published 2011-12-24 · Fixed CWE-287
Priority LOW 24
The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) v…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02142 · Published 2011-09-14 · Fixed
