Carnegie Mellon University Cyrus Imap Server 2.3.16
Approved changes feed: RSS · Atom
cpe:2.3:a:cmu:cyrus_imap_server:2.3.16:*:*:*:*:*:*:*
part: a version: 2.3.16 update: *
| Vendor | Cmu (d8fc24cc-efa9-507c-a308-194264732bb6) |
|---|---|
| Product | Cyrus Imap Server (8bb12f5d-b21e-5550-9e7c-70de034c08e4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/cyrus-imapd |
purl2cpe | 2026-06-01 10:11:52.324771 |
pkg:deb/ubuntu/cyrus-imapd |
purl2cpe | 2026-06-01 10:11:52.324772 |
pkg:github/cyrusimap/cyrus-imapd |
purl2cpe | 2026-06-01 10:11:52.324773 |
pkg:gitlab/redhat/cyrus-imapd |
purl2cpe | 2026-06-01 10:11:52.324775 |
pkg:rpm/centos/cyrus-imapd |
purl2cpe | 2026-06-01 10:11:52.324776 |
pkg:rpm/fedora/cyrus-imapd |
purl2cpe | 2026-06-01 10:11:52.324777 |
pkg:rpm/opensuse/cyrus-imapd |
purl2cpe | 2026-06-01 10:11:52.324779 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-3481 |
vulnerable | 2026-06-08 04:59:25.690717 |
Details available
The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.
Published: 2011-09-14T17:00:00.000Z
Updated: 2024-08-06T23:37:47.758Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1926 |
vulnerable | 2026-06-08 04:58:02.976257 |
Details available
The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
Published: 2011-05-23T22:00:00.000Z
Updated: 2024-08-06T22:46:00.659Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.