PT-2011-4412

CVE-2011-3372

·

Published

2011-12-01

·

Updated

2024-06-15

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Cyrus IMAPd versions 2.4.x through 2.4.11
Description The issue allows remote attackers to bypass authentication in the NNTP server (nntpd) by sending an AUTHINFO USER command without an additional AUTHINFO PASS command.
Recommendations For Cyrus IMAPd versions 2.4.x through 2.4.11, update to version 2.4.12 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
Related identifiers
CVE-2011-3372
DSA-2318-1
OPENSUSE-SU-2024:10015-1
RHSA-2011:1508
RHSA-2011_1508
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com