CVE Feed

    Dashboard / CVE / CVE-2011-3208

    CVE-2011-3208

    Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.

    Published:Sep 8, 2011
    Last Modified:Apr 11, 2025
    EPS:Sep 14, 2011
    EPSS Score:0.08285
    CVSS Score:7.5

    Affected Products

    Vendor
    Cmu
    Product
    Cyrus Imap Server
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    References

    http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=199
    http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=200
    http://git.cyrusimap.org/cyrus-imapd/commit/?id=0f8f026699829b65733c3081657b24e2174f4f4d
    http://git.cyrusimap.org/cyrus-imapd/commit/?id=3244c18c928fa331f6927e2b8146abe90feafddd
    http://lists.opensuse.org/opensuse-updates/2011-09/msg00019.html
    http://secunia.com/advisories/45938
    http://secunia.com/advisories/45975
    http://secunia.com/advisories/46064
    http://securitytracker.com/id?1026031
    http://www.debian.org/security/2011/dsa-2318
    http://www.mandriva.com/security/advisories?name=MDVSA-2011:149
    http://www.osvdb.org/75307
    http://www.redhat.com/support/errata/RHSA-2011-1317.html
    http://www.securityfocus.com/bid/49534
    https://bugzilla.redhat.com/show_bug.cgi?id=734926
    https://exchange.xforce.ibmcloud.com/vulnerabilities/69679
    https://hermes.opensuse.org/messages/11723935
    http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=199
    http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=200
    http://git.cyrusimap.org/cyrus-imapd/commit/?id=0f8f026699829b65733c3081657b24e2174f4f4d
    http://git.cyrusimap.org/cyrus-imapd/commit/?id=3244c18c928fa331f6927e2b8146abe90feafddd
    http://lists.opensuse.org/opensuse-updates/2011-09/msg00019.html
    http://secunia.com/advisories/45938
    http://secunia.com/advisories/45975
    http://secunia.com/advisories/46064
    http://securitytracker.com/id?1026031
    http://www.debian.org/security/2011/dsa-2318
    http://www.mandriva.com/security/advisories?name=MDVSA-2011:149
    http://www.osvdb.org/75307
    http://www.redhat.com/support/errata/RHSA-2011-1317.html
    http://www.securityfocus.com/bid/49534
    https://bugzilla.redhat.com/show_bug.cgi?id=734926
    https://exchange.xforce.ibmcloud.com/vulnerabilities/69679
    https://hermes.opensuse.org/messages/11723935

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High