IMAP: Vulnerable Cyrus Version ( < 2.2.11)
This signature detects Cyrus IMAP Server versions earlier than 2.2.11, which contain buffer overflow vulnerabilities. Attackers can execute malicious code on a remote Cyrus IMAP server.
Extended Description
A memory corruption vulnerability has been discovered in SASL when generating logs files. It has been reported that under some circumstances SASL fails to allocate sufficient memory for string used in log entries. By causing Cyrus to generate a malicious log it may be possible for an attacker to corrupt memory. This could potentially be exploited to overwrite the LSB of a sensitive variable or possibly cause inaccurate logs to be created. It should be noted that although this vulnerability was discovered in Cyrus, it may also affect other programs that utilize the SASL library.
Affected Products
Apple mac_os_x
Short Name
IMAP:VULN:CYRUS-2-1-11
Severity
Info
Recommended
False
Recommended Action
None
Category
IMAP
Keywords
( 2.2.11) < CVE-2002-1347 Cyrus Version Vulnerable bid:6349
Release Date
02/17/2005
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Rarely
Vendors
Apple
Cyrus-utils
CVSS Score
7.5