Vulnerability in Cyrus Imapd

CVE-2005-0546

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer…

EPSS: 0.042 (89.9th percentile) — read the EPSS interpretation.

Affected products

  • Cyrus Imapd — versions 2.0.17, 2.1.16, 2.1.17
  • N/a — versions n/a

References