CVE-2011-1926

EUVD-2011-1924
The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.1 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
Affected Products (NVD)
VendorProductVersion
cmucyrus_imap_server
𝑥
≤ 2.4.6
cmucyrus_imap_server
2.0.17
cmucyrus_imap_server
2.1.16
cmucyrus_imap_server
2.1.17
cmucyrus_imap_server
2.1.18
cmucyrus_imap_server
2.2.8
cmucyrus_imap_server
2.2.9
cmucyrus_imap_server
2.2.10
cmucyrus_imap_server
2.2.11
cmucyrus_imap_server
2.2.12
cmucyrus_imap_server
2.2.13
cmucyrus_imap_server
2.2.13p1:p1
cmucyrus_imap_server
2.3.0
cmucyrus_imap_server
2.3.1
cmucyrus_imap_server
2.3.2
cmucyrus_imap_server
2.3.3
cmucyrus_imap_server
2.3.4
cmucyrus_imap_server
2.3.5
cmucyrus_imap_server
2.3.6
cmucyrus_imap_server
2.3.7
cmucyrus_imap_server
2.3.8
cmucyrus_imap_server
2.3.9
cmucyrus_imap_server
2.3.10
cmucyrus_imap_server
2.3.11
cmucyrus_imap_server
2.3.12
cmucyrus_imap_server
2.3.13
cmucyrus_imap_server
2.3.14
cmucyrus_imap_server
2.3.15
cmucyrus_imap_server
2.3.16
cmucyrus_imap_server
2.4.0
cmucyrus_imap_server
2.4.1
cmucyrus_imap_server
2.4.2
cmucyrus_imap_server
2.4.3
cmucyrus_imap_server
2.4.4
cmucyrus_imap_server
2.4.5
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
cyrus-imapd-2.2
dapper
ignored
hardy
ignored
lucid
Fixed 2.2.13-19squeeze1build0.10.04.1
released
maverick
Fixed 2.2.13-19squeeze1build0.10.10.1
released
natty
ignored
oneiric
ignored
precise
dne
quantal
dne
raring
dne
cyrus-imapd-2.4
dapper
dne
hardy
dne
lucid
dne
maverick
dne
natty
dne
oneiric
not-affected
precise
not-affected
quantal
not-affected
raring
not-affected
Common Weakness Enumeration
References
http://bugzilla.cyrusimap.org/show_bug.cgi?id=3423
http://bugzilla.cyrusimap.org/show_bug.cgi?id=3424
http://git.cyrusimap.org/cyrus-imapd/patch/?id=523a91a5e86c8b9a27a138f04a3e3f2d8786f162
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061374.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061415.html
http://openwall.com/lists/oss-security/2011/05/17/15
http://openwall.com/lists/oss-security/2011/05/17/2
http://secunia.com/advisories/44670
http://secunia.com/advisories/44876
http://secunia.com/advisories/44913
http://secunia.com/advisories/44928
http://www.cyrusimap.org/docs/cyrus-imapd/2.4.7/changes.php
http://www.debian.org/security/2011/dsa-2242
http://www.debian.org/security/2011/dsa-2258
http://www.kb.cert.org/vuls/id/555316
http://www.mandriva.com/security/advisories?name=MDVSA-2011:100
http://www.redhat.com/support/errata/RHSA-2011-0859.html
http://www.securitytracker.com/id?1025625
https://bugzilla.redhat.com/show_bug.cgi?id=705288
https://exchange.xforce.ibmcloud.com/vulnerabilities/67867
http://bugzilla.cyrusimap.org/show_bug.cgi?id=3423
http://bugzilla.cyrusimap.org/show_bug.cgi?id=3424
http://git.cyrusimap.org/cyrus-imapd/patch/?id=523a91a5e86c8b9a27a138f04a3e3f2d8786f162
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061374.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061415.html
http://openwall.com/lists/oss-security/2011/05/17/15
http://openwall.com/lists/oss-security/2011/05/17/2
http://secunia.com/advisories/44670
http://secunia.com/advisories/44876
http://secunia.com/advisories/44913
http://secunia.com/advisories/44928
http://www.cyrusimap.org/docs/cyrus-imapd/2.4.7/changes.php
http://www.debian.org/security/2011/dsa-2242
http://www.debian.org/security/2011/dsa-2258
http://www.kb.cert.org/vuls/id/555316
http://www.mandriva.com/security/advisories?name=MDVSA-2011:100
http://www.redhat.com/support/errata/RHSA-2011-0859.html
http://www.securitytracker.com/id?1025625
https://bugzilla.redhat.com/show_bug.cgi?id=705288
https://exchange.xforce.ibmcloud.com/vulnerabilities/67867