Cyrus Imap Server
Approved changes feed: RSS · Atom
cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:2.1.16:*:*:*:*:*:*:*
part: a version: 2.1.16 update: *
| Vendor | Carnegie Mellon University (753ecaba-90bd-5075-96f0-4e02cfd98bc9) |
|---|---|
| Product | Cyrus Imap Server (c9bfadcc-1ad2-528d-8551-6fbf9a43bdc9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.701467 |
pkg:deb/ubuntu/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.701468 |
pkg:github/cyrusimap/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.701470 |
pkg:gitlab/redhat/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.701471 |
pkg:rpm/fedora/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.701472 |
pkg:rpm/opensuse/cyrus-imapd |
purl2cpe | 2026-06-01 10:12:36.701474 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-1067 |
vulnerable | 2026-06-08 04:47:52.694746 |
Details available
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.
Published: 2004-12-10T05:00:00.000Z
Updated: 2024-08-08T00:39:00.545Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1015 |
vulnerable | 2026-06-08 04:47:52.326296 |
Details available
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.635Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1013 |
vulnerable | 2026-06-08 04:47:52.314786 |
Details available
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:38:59.800Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1012 |
vulnerable | 2026-06-08 04:47:52.313783 |
Details available
The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.882Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1011 |
vulnerable | 2026-06-08 04:47:52.307507 |
Details available
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.588Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.