The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-23:01 advisory.

    The cyrus-imapd package contains the core of the Cyrus IMAP server. It is a scaleable enterprise mail     system designed for use from small to large enterprise environments using standards-based internet mail     technologies.
    A full Cyrus IMAP implementation allows a seamless mail and bulletin board environment to be set up across     multiple servers. It differs from other IMAP server implementations in that it is run on sealed servers,     where users are not normally permitted to log in and have no system account on the server. The mailbox     database is stored in parts of the filesystem that are private to the Cyrus IMAP server. All user access     to mail is through software using the IMAP, POP3 or KPOP protocols. It also includes support for virtual     domains, NNTP, mailbox annotations, and much more. The private mailbox database design gives the server     large advantages in efficiency, scalability and administratability. Multiple concurrent read/write     connections to the same mailbox are permitted. The server supports access control lists on mailboxes and     storage quotas on mailbox hierarchies.
    The Cyrus IMAP server supports the IMAP4rev1 protocol described in RFC 3501. IMAP4rev1 has been approved     as a proposed standard. It supports any authentication mechanism available from the SASL library,     imaps/pop3s/nntps (IMAP/POP3/NNTP encrypted using SSL and TLSv1) can be used for security. The server     supports single instance store where possible when an email message is addressed to multiple recipients,     SIEVE provides server side email filtering.
    Security issues fixed with this release:
    CVE-2011-3372     imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to     bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS     command.
    CVE-2011-3481     The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side     threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and     daemon crash) via a crafted References header in an e-mail message.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An authentication bypass flaw was found in the cyrus-imapd NNTP server, nntpd. A remote user able to use the nntpd service could use this flaw to read or post newsgroup messages on an NNTP server configured to require user authentication, without providing valid authentication credentials. (CVE-2011-3372)

A NULL pointer dereference flaw was found in the cyrus-imapd IMAP server, imapd. A remote attacker could send a specially crafted mail message to a victim that would possibly prevent them from accessing their mail normally, if they were using an IMAP client that relies on the server threading IMAP feature. (CVE-2011-3481)

The remote host is affected by the vulnerability described in GLSA-201110-16 (Cyrus IMAP Server: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in the Cyrus IMAP Server.
      Please review the CVE identifiers referenced below for details.
  Impact :

    An unauthenticated local or remote attacker may be able to execute       arbitrary code with the privileges of the Cyrus IMAP Server process or       cause a Denial of Service.
  Workaround :

    There is no known workaround at this time.

It was discovered that cyrus-imapd, a highly scalable mail system designed for use in enterprise environments, is not properly parsing mail headers when a client makes use of the IMAP threading feature. As a result, a NULL pointer is dereferenced which crashes the daemon. An attacker can trigger this by sending a mail containing crafted reference headers and access the mail with a client that uses the server threading feature of IMAP.

An authentication bypass (CVE-2011-3372) and a DoS vulnerability (CVE-2011-3481) have been fixed in the Cyrus IMAPd nntpd.

The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and Sieve support.

An authentication bypass flaw was found in the cyrus-imapd NNTP server, nntpd. A remote user able to use the nntpd service could use this flaw to read or post newsgroup messages on an NNTP server configured to require user authentication, without providing valid authentication credentials. (CVE-2011-3372)

A NULL pointer dereference flaw was found in the cyrus-imapd IMAP server, imapd. A remote attacker could send a specially crafted mail message to a victim that would possibly prevent them from accessing their mail normally, if they were using an IMAP client that relies on the server threading IMAP feature. (CVE-2011-3481)

Users of cyrus-imapd are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing the update, cyrus-imapd will be restarted automatically.

A vulnerability has been found and corrected in cyrus-imapd :

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message (CVE-2011-3481).

The updated packages have been patched to correct this issue.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
284386	MiracleLinux 4 : cyrus-imapd-2.3.16-6.AXS4.4 (AXSA:2012-23:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	high
69586	Amazon Linux AMI : cyrus-imapd (ALAS-2011-27)	Nessus	Amazon Linux Local Security Checks	2013/9/4	2018/4/18	high
56591	GLSA-201110-16 : Cyrus IMAP Server: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2011/10/24	2021/1/6	high
57517	Debian DSA-2377-1 : cyrus-imapd-2.2 - NULL pointer dereference	Nessus	Debian Local Security Checks	2012/1/12	2021/1/11	medium
57176	SuSE 10 Security Update : cyrus-imapd (ZYPP Patch Number 7785)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	high
61182	Scientific Linux Security Update : cyrus-imapd on SL4.x, SL5.x, SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	high
58476	Mandriva Linux Security Advisory : cyrus-imapd (MDVSA-2012:037)	Nessus	Mandriva Local Security Checks	2012/3/26	2021/1/6	medium
75459	openSUSE Security Update : cyrus-imapd (openSUSE-SU-2011:1170-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
75811	openSUSE Security Update : cyrus-imapd (openSUSE-SU-2011:1170-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
56605	SuSE 10 Security Update : cyrus-imapd (ZYPP Patch Number 7786)	Nessus	SuSE Local Security Checks	2011/10/24	2021/1/19	high

检测

插件搜索

high

high

high

medium

high

high

medium

high

high

high