Carnegie Mellon University

10 CVEs across 3 Carnegie Mellon University products. Browse Carnegie Mellon University vulnerabilities, severities, and proof-of-concept exploits.

Carnegie Mellon University products with known CVEs

ProductCVEs
Cyrus Imap Server7
Cyrus-Sasl2
Snmptrapd1
Carnegie Mellon University CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2009-06882009-05-15Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (appl…
CVE-2006-02502006-01-18Format string vulnerability in the snmp_input function in snmptrapd in CMU SNMP utilities (cmu-snmp) allows remote attackers to execute arbitrary code by sendi…
CVE-2004-10672005-01-10Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execu…
CVE-2004-10152005-01-10Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code…
CVE-2004-10132005-01-10The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain comma…
CVE-2004-10122005-01-10The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain com…
CVE-2004-10112005-01-10Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code…
CVE-2002-15802004-06-14Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitate…
CVE-2001-11542001-08-30Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.
CVE-2000-09562000-12-19cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified acce…