The remote host is missing Security Update 2005-003. This security update contains security fixes for the following applications :

  - AFP Server
  - Bluetooth Setup Assistant
  - Core Foundation
  - Cyrus IMAP
  - Cyrus SASL
  - Folder Permissions
  - Mailman
  - Safari

These programs have multiple vulnerabilities which may allow a remote attacker to execute arbitrary code.

Recently another buffer overflow has been discovered in the SASL authentication module of the Cyrus IMAP server. An off-by-one comparison error in the mysasl_canon_user() function could lead to a missing termination of an user name string.

This vulnerability could allow remote, attacker-supplied machine code to be executed in the context of the affected server process. Since the IMAP server usually runs as unprivileged user 'cyrus', there is no possibility of root privilege escalation.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the remote Cyrus IMAPD server is vulnerable to one pre-authentication buffer overflow, as well as three post- authentication buffer overflows. A remote attacker could exploit these issues to crash the server, or possibly execute arbitrary code.

バナーによると、リモートのCyrus IMAPDサーバーは、1つの認証前バッファオーバーフローと3つの認証後バッファオーバーフローに対して脆弱です。リモートの攻撃者は、これらの問題を悪用し、サーバーをクラッシュさせるか、あるいは任意のコードを実行する可能性があります。

根据其标题，远程 Cyrus IMAPD 服务器容易受到一个身份验证前缓冲区溢出漏洞和三个身份验证后缓冲区溢出漏洞的影响。远程攻击者可利用这些问题导致服务器崩溃，或可能执行任意代码。

根據標題來判斷，遠端 Cyrus IMAPD 伺服器容易受到一個驗證前緩衝區溢位弱點影響，以及三個驗證後緩衝區溢位弱點影響。遠端攻擊者可利用這些弱點來造成服務損毀，或可能執行任意程式碼。

According to its banner, the remote Cyrus IMAPD server is vulnerable to a pre-login buffer overflow. Cyrus IMAP server is also vulnerable to three other buffer overflows after authentication. An attacker with or without a valid login could exploit these issues, and would be able to execute arbitrary commands as the owner of the Cyrus process.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
17587	Mac OS X Multiple Vulnerabilities (Security Update 2005-003)	Nessus	MacOS X Local Security Checks	2005/3/21	2024/5/28	high
20653	Ubuntu 4.10 : cyrus21-imapd vulnerability (USN-37-1)	Nessus	Ubuntu Local Security Checks	2006/1/15	2021/1/19	critical
15819	Cyrus IMAP Server < 2.2.10 Multiple Remote Overflows	Nessus	Gain a shell remotely	2004/11/23	2022/4/11	high
15819	Cyrus IMAP Server < 2.2.10複数のリモートオーバーフロー	Nessus	Gain a shell remotely	2004/11/23	2022/4/11	high
15819	Cyrus IMAP Server < 2.2.10 多个远程溢出	Nessus	Gain a shell remotely	2004/11/23	2022/4/11	high
15819	Cyrus IMAP Server < 2.2.10 多個遠端溢位弱點	Nessus	Gain a shell remotely	2004/11/23	2022/4/11	high
2425	Cyrus IMAPD < 2.2.10 Multiple Vulnerabilities	Nessus Network Monitor	IMAP Servers	2004/11/23	2019/3/6	high

检测

插件搜索

high

critical

high

high

high

high

high