Patchwire CVEs, their patch status, and feeds to follow them

CVE-2002-1580

Fixed in a distro release EPSS 17%

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.

Published 2004-05-20 · CVE record · OSV

Products: carnegie_mellon_university cyrus_imap_server

Distro releases

ReleasePackageFixed in
Debian 12cyrus-imapd1.5.19-9.10
Debian 13cyrus-imapd1.5.19-9.10
Debian 14cyrus-imapd1.5.19-9.10
Debian 3.0cyrus-imapd1.5.19-9.1