Cyrus Imap Server
Approved changes feed: RSS · Atom
cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:2.0.16:*:*:*:*:*:*:*
part: a version: 2.0.16 update: *
| Vendor | Carnegie Mellon University (753ecaba-90bd-5075-96f0-4e02cfd98bc9) |
|---|---|
| Product | Cyrus Imap Server (c9bfadcc-1ad2-528d-8551-6fbf9a43bdc9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.697883 |
pkg:deb/ubuntu/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.697885 |
pkg:github/cyrusimap/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.697886 |
pkg:gitlab/redhat/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.697888 |
pkg:rpm/fedora/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.697889 |
pkg:rpm/opensuse/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.697890 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-1067 |
vulnerable | 2026-06-08 04:47:52.694680 |
Details available
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.
Published: 2004-12-10T05:00:00.000Z
Updated: 2024-08-08T00:39:00.545Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1015 |
vulnerable | 2026-06-08 04:47:52.326198 |
Details available
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.635Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-1580 |
vulnerable | 2026-06-08 04:46:24.053331 |
Details available
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.
Published: 2004-05-20T04:00:00.000Z
Updated: 2024-08-08T03:26:29.337Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-1154 |
vulnerable | 2026-06-08 04:45:21.531704 |
Details available
Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.
Published: 2002-03-15T05:00:00.000Z
Updated: 2024-08-08T04:44:07.894Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.