The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1508 advisory.

    The cyrus-imapd packages contain a high-performance mail server with IMAP,     POP3, NNTP, and Sieve support.

    An authentication bypass flaw was found in the cyrus-imapd NNTP server,     nntpd. A remote user able to use the nntpd service could use this flaw to     read or post newsgroup messages on an NNTP server configured to require     user authentication, without providing valid authentication credentials.
    (CVE-2011-3372)

    A NULL pointer dereference flaw was found in the cyrus-imapd IMAP server,     imapd. A remote attacker could send a specially-crafted mail message to a     victim that would possibly prevent them from accessing their mail normally,     if they were using an IMAP client that relies on the server threading IMAP     feature. (CVE-2011-3481)

    Red Hat would like to thank the Cyrus IMAP project for reporting the     CVE-2011-3372 issue. Upstream acknowledges Stefan Cornelius of Secunia     Research as the original reporter of CVE-2011-3372.

    Users of cyrus-imapd are advised to upgrade to these updated packages,     which contain backported patches to correct these issues. After installing     the update, cyrus-imapd will be restarted automatically.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An authentication bypass (CVE-2011-3372) and a DoS vulnerability (CVE-2011-3481) have been fixed in the Cyrus IMAPd nntpd.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1508 advisory.

    - fix CVE-2011-3481: NULL pointer dereference via crafted       References header in email (#738391)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It was discovered that cyrus-imapd, a highly scalable mail system designed for use in enterprise environments, is not properly parsing mail headers when a client makes use of the IMAP threading feature. As a result, a NULL pointer is dereferenced which crashes the daemon. An attacker can trigger this by sending a mail containing crafted reference headers and access the mail with a client that uses the server threading feature of IMAP.

The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and Sieve support.

An authentication bypass flaw was found in the cyrus-imapd NNTP server, nntpd. A remote user able to use the nntpd service could use this flaw to read or post newsgroup messages on an NNTP server configured to require user authentication, without providing valid authentication credentials. (CVE-2011-3372)

A NULL pointer dereference flaw was found in the cyrus-imapd IMAP server, imapd. A remote attacker could send a specially crafted mail message to a victim that would possibly prevent them from accessing their mail normally, if they were using an IMAP client that relies on the server threading IMAP feature. (CVE-2011-3481)

Users of cyrus-imapd are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, cyrus-imapd will be restarted automatically.

A vulnerability has been found and corrected in cyrus-imapd :

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message (CVE-2011-3481).

The updated packages have been patched to correct this issue.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
56991	RHEL 6 : cyrus-imapd (RHSA-2011:1508)	Nessus	Red Hat Local Security Checks	2011/12/2	2025/4/14	high
57096	SuSE 11.1 Security Update : cyrus-imapd (SAT Patch Number 5233)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	high
68397	Oracle Linux 5 / 6 : cyrus-imapd (ELSA-2011-1508)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
57176	SuSE 10 Security Update : cyrus-imapd (ZYPP Patch Number 7785)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	high
57517	Debian DSA-2377-1 : cyrus-imapd-2.2 - NULL pointer dereference	Nessus	Debian Local Security Checks	2012/1/12	2021/1/11	medium
61182	Scientific Linux Security Update : cyrus-imapd on SL4.x, SL5.x, SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
56605	SuSE 10 Security Update : cyrus-imapd (ZYPP Patch Number 7786)	Nessus	SuSE Local Security Checks	2011/10/24	2021/1/19	high
58476	Mandriva Linux Security Advisory : cyrus-imapd (MDVSA-2012:037)	Nessus	Mandriva Local Security Checks	2012/3/26	2021/1/6	medium
75459	openSUSE Security Update : cyrus-imapd (openSUSE-SU-2011:1170-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
75811	openSUSE Security Update : cyrus-imapd (openSUSE-SU-2011:1170-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high

检测

插件搜索

high

high

high

high

medium

high

high

medium

high

high