CVE-2011-3208

cyrus-imapd: nntpd buffer overflow in split_wildmats()

Severity Score

9.8

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.

Desbordamiento de búfer basado en la pila en la función split_wildmats en nntpd.c en nntpd en el servidor Cyrus IMAP antes de la verison v2.3.17 y en v2.4.x antes de v2.4.11 permite a atacantes remotos ejecutar código de su elección mediante un comando NNTP debidamente modificado.

Multiple vulnerabilities has been discovered and corrected in cyrus-imapd. Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command. Secunia Research has discovered a vulnerability in Cyrus IMAPd, which can be exploited by malicious people to bypass certain security restrictions. The vulnerability is caused due to an error within the authentication mechanism of the NNTP server, which can be exploited to bypass the authentication process and execute commands intended for authenticated users by sending an AUTHINFO USER command without a following AUTHINFO PASS command.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-08-19 CVE Reserved
2011-09-14 CVE Published
2024-08-06 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (18)

URL	Tag	Source
http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=199	Mailing List
http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=200	Mailing List
http://securitytracker.com/id?1026031	Vdb Entry
http://www.osvdb.org/75307	Vdb Entry
http://www.securityfocus.com/bid/49534	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/69679	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://git.cyrusimap.org/cyrus-imapd/commit/?id=0f8f026699829b65733c3081657b24e2174f4f4d	2018-10-30
http://git.cyrusimap.org/cyrus-imapd/commit/?id=3244c18c928fa331f6927e2b8146abe90feafddd	2018-10-30
https://bugzilla.redhat.com/show_bug.cgi?id=734926	2011-09-19

URL	Date	SRC
http://lists.opensuse.org/opensuse-updates/2011-09/msg00019.html	2018-10-30
http://secunia.com/advisories/45938	2018-10-30
http://secunia.com/advisories/45975	2018-10-30
http://secunia.com/advisories/46064	2018-10-30
http://www.debian.org/security/2011/dsa-2318	2018-10-30
http://www.mandriva.com/security/advisories?name=MDVSA-2011:149	2018-10-30
http://www.redhat.com/support/errata/RHSA-2011-1317.html	2018-10-30
https://hermes.opensuse.org/messages/11723935	2018-10-30
https://access.redhat.com/security/cve/CVE-2011-3208	2011-09-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				<= 2.3.16 Search vendor "Cmu" for product "Cyrus Imap Server" and version " <= 2.3.16"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.0.17 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.0.17"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.1.16 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.1.16"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.1.17 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.1.17"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.1.18 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.1.18"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.2.8 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.2.8"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.2.9 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.2.9"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.2.10 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.2.10"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.2.11 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.2.11"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.2.12 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.2.12"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.2.13 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.2.13"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.2.13p1 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.2.13p1"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.2.14 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.2.14"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.0 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.0"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.1 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.1"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.2 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.2"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.3 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.3"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.4 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.4"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.5 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.5"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.6 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.6"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.7 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.7"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.8 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.8"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.9 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.9"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.10 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.10"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.11 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.11"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.12 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.12"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.13 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.13"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.14 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.14"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.3.15 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.3.15"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.4.0 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.4.0"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.4.1 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.4.1"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.4.2 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.4.2"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.4.3 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.4.3"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.4.4 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.4.4"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.4.5 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.4.5"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.4.6 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.4.6"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.4.7 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.4.7"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.4.8 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.4.8"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.4.9 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.4.9"		-		Affected
Cmu Search vendor "Cmu"		Cyrus Imap Server Search vendor "Cmu" for product "Cyrus Imap Server"				2.4.10 Search vendor "Cmu" for product "Cyrus Imap Server" and version "2.4.10"		-		Affected