Skip to content
OpenAdvisories
Unscored DSA-1893-1 2 CVEs

cyrus-imapd-2.2 kolab-cyrus-imapd - arbitrary code execution

Published Sep 23, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 4

ReleasePackageFixed in
Debian · 4.0 cyrus-imapd-2.2 2.2.13-10+etch4
Debian · 4.0 kolab-cyrus-imapd 2.2.13-2+etch2
Debian · 5.0 cyrus-imapd-2.2 2.2.13-14+lenny3
Debian · 5.0 kolab-cyrus-imapd 2.2.13-5+lenny2

Vulnerabilities 2

  • Unscored —
    CVE-2009-2632

    Buffer overflow in the SIEVE script component (sieve/script.c), as used in cyrus-imapd in Cyrus IMAP Server 2.2.13 and …

    dovecot Debian
  • Unscored —
    CVE-2009-3235

    Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived …

    dovecot Debian