Approved changes feed: RSS · Atom

cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:2.2.9:*:*:*:*:*:*:*

part: a version: 2.2.9 update: *

VendorCarnegie Mellon University (753ecaba-90bd-5075-96f0-4e02cfd98bc9)
ProductCyrus Imap Server (c9bfadcc-1ad2-528d-8551-6fbf9a43bdc9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/cyrus-imapd purl2cpe 2026-06-01 10:12:36.721490
pkg:deb/ubuntu/cyrus-imapd purl2cpe 2026-06-01 10:12:36.721491
pkg:github/cyrusimap/cyrus-imapd purl2cpe 2026-06-01 10:12:36.721493
pkg:gitlab/redhat/cyrus-imapd purl2cpe 2026-06-01 10:12:36.721494
pkg:rpm/fedora/cyrus-imapd purl2cpe 2026-06-01 10:12:36.721496
pkg:rpm/opensuse/cyrus-imapd purl2cpe 2026-06-01 10:12:36.721497

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-1067 vulnerable 2026-06-08 04:47:52.694918 Details available
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.
Published: 2004-12-10T05:00:00.000Z
Updated: 2024-08-08T00:39:00.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1015 vulnerable 2026-06-08 04:47:52.328287 Details available
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.
Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.635Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.