CVE-2011-1926
NONE EPSS 89.3%
Published May 23, 201115y ago · Modified Jun 16, 20262w ago
Published May 23, 2011 15y ago
Last Modified Jun 16, 2026 2w ago
Description
The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
Threat Intelligence
EPSS Exploit Probability
89.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-264
Affected Products 35
| Vendor | Product | Version | Range |
|---|---|---|---|
| cmu | cyrus_imap_server | * | ≤2.4.6 |
| cmu | cyrus_imap_server | 2.0.17 | any |
| cmu | cyrus_imap_server | 2.1.16 | any |
| cmu | cyrus_imap_server | 2.1.17 | any |
| cmu | cyrus_imap_server | 2.1.18 | any |
| cmu | cyrus_imap_server | 2.2.8 | any |
| cmu | cyrus_imap_server | 2.2.9 | any |
| cmu | cyrus_imap_server | 2.2.10 | any |
| cmu | cyrus_imap_server | 2.2.11 | any |
| cmu | cyrus_imap_server | 2.2.12 | any |
| cmu | cyrus_imap_server | 2.2.13 | any |
| cmu | cyrus_imap_server | 2.2.13p1 | any |
| cmu | cyrus_imap_server | 2.3.0 | any |
| cmu | cyrus_imap_server | 2.3.1 | any |
| cmu | cyrus_imap_server | 2.3.2 | any |
| cmu | cyrus_imap_server | 2.3.3 | any |
| cmu | cyrus_imap_server | 2.3.4 | any |
| cmu | cyrus_imap_server | 2.3.5 | any |
| cmu | cyrus_imap_server | 2.3.6 | any |
| cmu | cyrus_imap_server | 2.3.7 | any |
| cmu | cyrus_imap_server | 2.3.8 | any |
| cmu | cyrus_imap_server | 2.3.9 | any |
| cmu | cyrus_imap_server | 2.3.10 | any |
| cmu | cyrus_imap_server | 2.3.11 | any |
| cmu | cyrus_imap_server | 2.3.12 | any |
| cmu | cyrus_imap_server | 2.3.13 | any |
| cmu | cyrus_imap_server | 2.3.14 | any |
| cmu | cyrus_imap_server | 2.3.15 | any |
| cmu | cyrus_imap_server | 2.3.16 | any |
| cmu | cyrus_imap_server | 2.4.0 | any |
| cmu | cyrus_imap_server | 2.4.1 | any |
| cmu | cyrus_imap_server | 2.4.2 | any |
| cmu | cyrus_imap_server | 2.4.3 | any |
| cmu | cyrus_imap_server | 2.4.4 | any |
| cmu | cyrus_imap_server | 2.4.5 | any |
References 20
- bugzilla.cyrusimap.org http://bugzilla.cyrusimap.org/show_bug.cgi?id=3423
- bugzilla.cyrusimap.org http://bugzilla.cyrusimap.org/show_bug.cgi?id=3424
- git.cyrusimap.org http://git.cyrusimap.org/cyrus-imapd/patch/?id=523a91a5e86c8b9a27a138f04a3e3f2d8786f162
- lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061374.html
- lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061415.html
- openwall.com http://openwall.com/lists/oss-security/2011/05/17/15
- openwall.com http://openwall.com/lists/oss-security/2011/05/17/2
- secunia.com http://secunia.com/advisories/44670
- secunia.com http://secunia.com/advisories/44876
- secunia.com http://secunia.com/advisories/44913
- secunia.com http://secunia.com/advisories/44928
- cyrusimap.org http://www.cyrusimap.org/docs/cyrus-imapd/2.4.7/changes.php
- debian.org http://www.debian.org/security/2011/dsa-2242
- debian.org http://www.debian.org/security/2011/dsa-2258
- kb.cert.org http://www.kb.cert.org/vuls/id/555316
- mandriva.com http://www.mandriva.com/security/advisories?name=MDVSA-2011:100
- redhat.com http://www.redhat.com/support/errata/RHSA-2011-0859.html
- securitytracker.com http://www.securitytracker.com/id?1025625
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=705288
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/67867
Remediation
- bugzilla.cyrusimap.org http://bugzilla.cyrusimap.org/show_bug.cgi?id=3423
- bugzilla.cyrusimap.org http://bugzilla.cyrusimap.org/show_bug.cgi?id=3424
- git.cyrusimap.org http://git.cyrusimap.org/cyrus-imapd/patch/?id=523a91a5e86c8b9a27a138f04a3e3f2d8786f162
- openwall.com http://openwall.com/lists/oss-security/2011/05/17/15
- openwall.com http://openwall.com/lists/oss-security/2011/05/17/2
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=705288