CVE-2002-1580
Fixed in a distro release EPSS 17%
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.
Products: carnegie_mellon_university cyrus_imap_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cyrus-imapd | 1.5.19-9.10 |
| Debian 13 | cyrus-imapd | 1.5.19-9.10 |
| Debian 14 | cyrus-imapd | 1.5.19-9.10 |
| Debian 3.0 | cyrus-imapd | 1.5.19-9.1 |