CVSS: 7.5EPSS: 42%CPEs: 6EXPL: 3CVE-2002-1580 – Cyrus IMAPD 1.4/1.5.19/2.0.12/2.0.16/2.1.9/2.1.10 - Pre-Login Heap Corruption
https://notcve.org/view.php?id=CVE-2002-1580
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347. Desbordamiento de enteros en imapparse.c de Cyrus IMAP server 1.4 y 2.1.10 permite a atacantes remotos ejecutar código arbitrario mediante un valor de longitud grande que facilita un ataque de desbordamiento de búfer, una vulnerabilidad distinta de CAN-2002-1347. • https://www.exploit-db.com/exploits/22061 http://asg.web.cmu.edu/cyrus/download/imapd/changes.html http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000557 http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557 http://www.debian.org/security/2002/dsa-215 http://www.kb.cert.org/vuls/id/740169 http://www.securityfocus.com/archive/1/301864 http://www.securityfocus.com/bid/6298 https://exchange.xforce.ibmcloud.com/vulnerabilities/10744 •
CVSS: 5.0EPSS: 1%CPEs: 4EXPL: 0CVE-2001-1154
https://notcve.org/view.php?id=CVE-2001-1154
Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients. • http://www.securityfocus.com/archive/1/211056 http://www.securityfocus.com/bid/3260 https://exchange.xforce.ibmcloud.com/vulnerabilities/7053 •