Test ID:	1.3.6.1.4.1.25623.1.0.103249
Category:	Buffer overflow
Title:	Cyrus IMAP Server 'split_wildmats()' Remote Buffer Overflow Vulnerability
Summary:	Cyrus IMAP Server is prone to a remote buffer-overflow vulnerability because the; application fails to properly bounds check user-supplied data before copying it into an; insufficiently sized buffer.
Description:	Summary: Cyrus IMAP Server is prone to a remote buffer-overflow vulnerability because the application fails to properly bounds check user-supplied data before copying it into an insufficiently sized buffer. Vulnerability Impact: Attackers can execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Affected Software/OS: Cyrus IMAP Server versions prior to 2.3.17 and 2.4.11 are vulnerable. Solution: Updates are available. Please see the references for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	BugTraq ID: 49534 Common Vulnerability Exposure (CVE) ID: CVE-2011-3208 http://www.securityfocus.com/bid/49534 Debian Security Information: DSA-2318 (Google Search) http://www.debian.org/security/2011/dsa-2318 http://www.mandriva.com/security/advisories?name=MDVSA-2011:149 http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=199 http://asg.andrew.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=200 http://www.osvdb.org/75307 http://www.redhat.com/support/errata/RHSA-2011-1317.html http://securitytracker.com/id?1026031 http://secunia.com/advisories/45938 http://secunia.com/advisories/45975 http://secunia.com/advisories/46064 SuSE Security Announcement: SUSE-SU-2011:1034 (Google Search) https://hermes.opensuse.org/messages/11723935 SuSE Security Announcement: openSUSE-SU-2011:1036 (Google Search) http://lists.opensuse.org/opensuse-updates/2011-09/msg00019.html XForce ISS Database: cyrus-splitwildmats-bo(69679) https://exchange.xforce.ibmcloud.com/vulnerabilities/69679
Copyright	This script is Copyright (C) 2011 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.