SB2011120101 - Red Hat update for cyrus-imapd
Published: December 1, 2011 Updated: May 3, 2017
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 2 secuirty vulnerabilities.
1) Authentication bypass in cyrus-imapd NNTP server (CVE-ID: CVE-2011-3372)
The vulnerability allows a remote attacker to gain unauthorized access to the application.
The vulnerability exists due to an error in nntpd. A remote unauthenticated attacker can bypass authentication process and read or post arbitrary newsgroup messages on vulnerable NNTP server.
Successful exploitation of this vulnerability may allow an attacker to gain access to potentially sensitive information and perform social engineering attacks against NNTP server subscribers.
2) NULL pointer dereference (CVE-ID: CVE-2011-3481)
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to a NULL pointer dereference error when handling email messages in imapd service. A remote attacker can send a specially crafted email message to victim and prevent the victim from accessing further emails, if the victim uses IMAP client, which relies on the server threading IMAP feature.
Successful exploitation of this vulnerability will prevent the victim from accessing email messages.
Remediation
Install update from vendor's website.