The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and Sieve support.

An authentication bypass flaw was found in the cyrus-imapd NNTP server, nntpd. A remote user able to use the nntpd service could use this flaw to read or post newsgroup messages on an NNTP server configured to require user authentication, without providing valid authentication credentials. (CVE-2011-3372)

A NULL pointer dereference flaw was found in the cyrus-imapd IMAP server, imapd. A remote attacker could send a specially crafted mail message to a victim that would possibly prevent them from accessing their mail normally, if they were using an IMAP client that relies on the server threading IMAP feature. (CVE-2011-3481)

Users of cyrus-imapd are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, cyrus-imapd will be restarted automatically.

An authentication bypass (CVE-2011-3372) and a DoS vulnerability (CVE-2011-3481) have been fixed in the Cyrus IMAPd nntpd.

A vulnerability has been found and corrected in cyrus-imapd :

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message (CVE-2011-3481).

The updated packages have been patched to correct this issue.

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-380:03 advisory.

    A full Cyrus IMAP implementation allows a seamless mail and bulletin board environment to be set up across     multiple servers. It differs from other IMAP server implementations in that it is run on 'sealed' servers,     where users are not normally permitted to log in and have no system account on the server. The mailbox     database is stored in parts of the filesystem that are private to the Cyrus IMAP server. All user access     to mail is through software using the IMAP, POP3 or KPOP protocols. It also includes support for virtual     domains, NNTP, mailbox annotations, and much more. The private mailbox database design gives the server     large advantages in efficiency, scalability and administrability. Multiple concurrent read/write     connections to the same mailbox are permitted. The server supports access control lists on mailboxes and     storage quotas on mailbox hierarchies.
    The Cyrus IMAP server supports the IMAP4rev1 protocol described in RFC 3501. IMAP4rev1 has been approved     as a proposed standard. It supports any authentication mechanism available from the SASL library,     imaps/pop3s/nntps (IMAP/POP3/NNTP encrypted using SSL and TLSv1) can be used for security. The server     supports single instance store where possible when an email message is addressed to multiple recipients,     SIEVE provides server side email filtering.
    Security issues fixed with this release:
    CVE-2011-3372     No description available at the time of writing, please refer to the CVE link below.
    CVE-2011-3481     The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side     threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and     daemon crash) via a crafted References header in an e-mail message.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-23:01 advisory.

    The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail     system designed for use from small to large enterprise environments using standards-based internet mail     technologies.
    A full Cyrus IMAP implementation allows a seamless mail and bulletin board environment to be set up across     multiple servers. It differs from other IMAP server implementations in that it is run on sealed servers,     where users are not normally permitted to log in and have no system account on the server. The mailbox     database is stored in parts of the filesystem that are private to the Cyrus IMAP server. All user access     to mail is through software using the IMAP, POP3 or KPOP protocols. It also includes support for virtual     domains, NNTP, mailbox annotations, and much more. The private mailbox database design gives the server     large advantages in efficiency, scalability and administratability. Multiple concurrent read/write     connections to the same mailbox are permitted. The server supports access control lists on mailboxes and     storage quotas on mailbox hierarchies.
    The Cyrus IMAP server supports the IMAP4rev1 protocol described in RFC 3501. IMAP4rev1 has been approved     as a proposed standard. It supports any authentication mechanism available from the SASL library,     imaps/pop3s/nntps (IMAP/POP3/NNTP encrypted using SSL and TLSv1) can be used for security. The server     supports single instance store where possible when an email message is addressed to multiple recipients,     SIEVE provides server side email filtering.
    Security issues fixed with this release:
    CVE-2011-3372     imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to     bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS     command.
    CVE-2011-3481     The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side     threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and     daemon crash) via a crafted References header in an e-mail message.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201110-16 (Cyrus IMAP Server: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the Cyrus IMAP Server.
      Please review the CVE identifiers referenced below for details.
  Impact :

    An unauthenticated local or remote attacker may be able to execute       arbitrary code with the privileges of the Cyrus IMAP Server process or       cause a Denial of Service.
  Workaround :

    There is no known workaround at this time.

An authentication bypass flaw was found in the cyrus-imapd NNTP server, nntpd. A remote user able to use the nntpd service could use this flaw to read or post newsgroup messages on an NNTP server configured to require user authentication, without providing valid authentication credentials. (CVE-2011-3372)

A NULL pointer dereference flaw was found in the cyrus-imapd IMAP server, imapd. A remote attacker could send a specially crafted mail message to a victim that would possibly prevent them from accessing their mail normally, if they were using an IMAP client that relies on the server threading IMAP feature. (CVE-2011-3481)

Updated cyrus-imapd packages that fix two security issues are now available for Red Hat Enterprise Linux 4, 5, and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and Sieve support.

An authentication bypass flaw was found in the cyrus-imapd NNTP server, nntpd. A remote user able to use the nntpd service could use this flaw to read or post newsgroup messages on an NNTP server configured to require user authentication, without providing valid authentication credentials. (CVE-2011-3372)

A NULL pointer dereference flaw was found in the cyrus-imapd IMAP server, imapd. A remote attacker could send a specially crafted mail message to a victim that would possibly prevent them from accessing their mail normally, if they were using an IMAP client that relies on the server threading IMAP feature. (CVE-2011-3481)

Red Hat would like to thank the Cyrus IMAP project for reporting the CVE-2011-3372 issue. Upstream acknowledges Stefan Cornelius of Secunia Research as the original reporter of CVE-2011-3372.

Users of cyrus-imapd are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, cyrus-imapd will be restarted automatically.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
61182	Scientific Linux Security Update : cyrus-imapd on SL4.x, SL5.x, SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
56605	SuSE 10 Security Update : cyrus-imapd (ZYPP Patch Number 7786)	Nessus	SuSE Local Security Checks	2011/10/24	2021/1/19	high
58476	Mandriva Linux Security Advisory : cyrus-imapd (MDVSA-2012:037)	Nessus	Mandriva Local Security Checks	2012/3/26	2021/1/6	medium
75811	openSUSE Security Update : cyrus-imapd (openSUSE-SU-2011:1170-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
75459	openSUSE Security Update : cyrus-imapd (openSUSE-SU-2011:1170-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
284329	MiracleLinux 3 : cyrus-imapd-2.3.7-12.AXS3.2 (AXSA:2011-380:03)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	high
284386	MiracleLinux 4 : cyrus-imapd-2.3.16-6.AXS4.4 (AXSA:2012-23:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	high
56591	GLSA-201110-16 : Cyrus IMAP Server: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2011/10/24	2021/1/6	high
69586	Amazon Linux AMI : cyrus-imapd (ALAS-2011-27)	Nessus	Amazon Linux Local Security Checks	2013/9/4	2018/4/18	high
56985	CentOS 4 / 5 : cyrus-imapd (CESA-2011:1508)	Nessus	CentOS Local Security Checks	2011/12/2	2021/1/4	high

検出

プラグインの検索

high

high

medium

high

high

high

high

high

high

high