Skip to content
OpenAdvisories
Unscored DSA-2258-1 1 CVE

kolab-cyrus-imapd - implementation error

Published Jun 11, 2011 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 kolab-cyrus-imapd 2.2.13-5+lenny3
Debian · 6.0 kolab-cyrus-imapd 2.2.13-9.1

Vulnerabilities 1

  • Unscored —

    The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows ma…