Authentication bypass in cyrus-imapd NNTP server in Red Hat Inc. products - CVE-2011-3372

Vulnerability identifier: #VU351

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2011-3372

CWE-ID: CWE-287

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to gain unauthorized access to the application.

The vulnerability exists due to an error in nntpd. A remote unauthenticated attacker can bypass authentication process and read or post arbitrary newsgroup messages on vulnerable NNTP server.

Successful exploitation of this vulnerability may allow an attacker to gain access to potentially sensitive information and perform social engineering attacks against NNTP server subscribers.

Red Hat cyrus-imapd
Red Hat Desktop
Red Hat Enterprise Linux AS
Red Hat Enterprise Linux ES
Red Hat Enterprise Linux WS
Red Hat Enterprise Linux for x86_64
RHEL Desktop Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server EUS
Amazon Linux AMI
Red Hat Enterprise Linux for IBM z Systems

Update to version 2.2.12-17.

• https://rhn.redhat.com/errata/RHSA-2011-1508.html

• Multiple vulnerabilities in Red Hat cyrus-imapd
• Amazon Linux AMI update for cyrus-imapd
• Red Hat update for cyrus-imapd