CVE-2006-2502

NONE EPSS 98.9%

Published May 22, 200620y ago · Modified Jun 16, 20262w ago

Published May 22, 2006 20y ago

Last Modified Jun 16, 2026 2w ago

Description

Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command.

Threat Intelligence

EPSS Exploit Probability

98.9% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Affected Products 1

Vendor	Product	Version	Range
cyrus	imapd	2.3.2	any

References 5

archives.neohapsis.com http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0527.html

Exploit
securitytracker.com http://securitytracker.com/id?1016131
securityfocus.com http://www.securityfocus.com/bid/18056

Exploit
vupen.com http://www.vupen.com/english/advisories/2006/1891
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/26578

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.