CVE-2011-3372
24.12.2011, 19:55
imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cyrus | imapd | 𝑥 ≤ 2.4.11 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cyrus-imapd-2.2 |
| ||||||||||||||||||||||||||||||||
| cyrus-imapd-2.4 |
| ||||||||||||||||||||||||||||||||
| kolab-cyrus-imapd |
|
Common Weakness Enumeration
References