Skip to content
OpenAdvisories
Unscored RHSA-2011:1508 2 CVEs

Red Hat Security Advisory: cyrus-imapd security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 42

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd-debuginfo 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd-devel 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd-murder 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd-nntp 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::as cyrus-imapd-utils 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::as perl-Cyrus 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd-debuginfo 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd-devel 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd-murder 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd-nntp 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop cyrus-imapd-utils 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop perl-Cyrus 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd-debuginfo 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd-devel 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd-murder 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd-nntp 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::es cyrus-imapd-utils 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::es perl-Cyrus 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd-debuginfo 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd-devel 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd-murder 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd-nntp 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::ws cyrus-imapd-utils 0:2.2.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::ws perl-Cyrus 0:2.2.12-17.el4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation cyrus-imapd 0:2.3.7-12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation cyrus-imapd-debuginfo 0:2.3.7-12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation cyrus-imapd-devel 0:2.3.7-12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation cyrus-imapd-perl 0:2.3.7-12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::client_workstation cyrus-imapd-utils 0:2.3.7-12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server cyrus-imapd 0:2.3.7-12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server cyrus-imapd-debuginfo 0:2.3.7-12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server cyrus-imapd-devel 0:2.3.7-12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server cyrus-imapd-perl 0:2.3.7-12.el5_7.2
Red Hat · RHEL 5 enterprise_linux:5::server cyrus-imapd-utils 0:2.3.7-12.el5_7.2
Red Hat · RHEL 6 enterprise_linux:6::server cyrus-imapd 0:2.3.16-6.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server cyrus-imapd-debuginfo 0:2.3.16-6.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server cyrus-imapd-devel 0:2.3.16-6.el6_1.4
Red Hat · RHEL 6 enterprise_linux:6::server cyrus-imapd-utils 0:2.3.16-6.el6_1.4

Vulnerabilities 2

  • Unscored —
    CVE-2011-3372

    imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentic…

  • Unscored —
    CVE-2011-3481

    The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enable…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=738391
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=740822
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1508.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-3372
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3372
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3372
  • report
    https://access.redhat.com/security/cve/CVE-2011-3481
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3481
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3481