CVE-2011-3208

Опубликовано: 14 сент. 2011

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cmu:cyrus_imap_server:*:*:*:*:*:*:*:*

Версия до 2.3.16 (включая)

cpe:2.3:a:cmu:cyrus_imap_server:2.0.17:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.1.16:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.1.17:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.1.18:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.8:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.9:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.10:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.11:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.12:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.13:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.13p1:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.2.14:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.4:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.5:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.6:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.7:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.8:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.9:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.10:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.11:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.12:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.13:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.14:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.3.15:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:cmu:cyrus_imap_server:2.4.0:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.2:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.3:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.4:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.5:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.6:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.7:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.8:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.9:*:*:*:*:*:*:*

cpe:2.3:a:cmu:cyrus_imap_server:2.4.10:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08285

Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2011-3208

ubuntu

почти 14 лет назад

CVE-2011-3208

redhat

почти 14 лет назад

CVE-2011-3208

debian

почти 14 лет назад

Stack-based buffer overflow in the split_wildmats function in nntpd.c ...

GHSA-46rx-vcfq-hxc2

github

около 3 лет назад

ELSA-2011-1317

oracle-oval

почти 14 лет назад

ELSA-2011-1317: cyrus-imapd security update (IMPORTANT)

EPSS

Процентиль: 92%

0.08285

Низкий

7.5 High

CVSS2

Дефекты

CWE-119