Cyrus

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Cyrus records in CISA KEV

No Cyrus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Imap 14 records MEDIUM Sasl 4 records MEDIUM Imapd 3 records MEDIUM Libsieve 1 record MEDIUM

Records

3 records in Imapd · all components

TI-2006-02433 CVE-2006-2502 · GHSA-vqvc-vrx3-5hgj

Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the…

MEDIUM 55

Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.53333 Published 2006-05-22 No fix listed

TI-2005-00502 CVE-2005-0546 · GHSA-734w-q42p-q63v

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute…

MEDIUM 40

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04244 Published 2005-02-25 Fixed

TI-2011-02982 CVE-2011-3372 · GHSA-vq7q-vrrq-cr5f

imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote…

LOW 39

imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03289 Published 2011-12-24 Fixed CWE-287

Open these records in search →

Critical	4
High	10
Medium	7
Low	1
No CVSS	0