Skip to content
OpenAdvisories
Unscored DSA-2242-1 1 CVE

cyrus-imapd-2.2 - implementation error

Published May 25, 2011 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 cyrus-imapd-2.2 2.2.13-14+lenny4
Debian · 6.0 cyrus-imapd-2.2 2.2.13-19+squeeze1

Vulnerabilities 1

  • Unscored —
    CVE-2011-1926

    The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows ma…