SB2011100601 - Multiple vulnerabilities in Red Hat cyrus-imapd

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) NULL pointer dereference (CVE-ID: CVE-2011-3481)

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to a NULL pointer dereference error when handling email messages in imapd service. A remote attacker can send a specially crafted email message to victim and prevent the victim from accessing further emails, if the victim uses IMAP client, which relies on the server threading IMAP feature.

Successful exploitation of this vulnerability will prevent the victim from accessing email messages.

2) Authentication bypass in cyrus-imapd NNTP server (CVE-ID: CVE-2011-3372)

The vulnerability allows a remote attacker to gain unauthorized access to the application.

The vulnerability exists due to an error in nntpd. A remote unauthenticated attacker can bypass authentication process and read or post arbitrary newsgroup messages on vulnerable NNTP server.

Successful exploitation of this vulnerability may allow an attacker to gain access to potentially sensitive information and perform social engineering attacks against NNTP server subscribers.

Remediation

Install update from vendor's website.

References

• https://rhn.redhat.com/errata/RHSA-2011-1508.html