medium5.1Public exploit code
CVE-2006-2502
Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cyrus IMAPD - pop3d popsubfolders USER Buffer Overflow (Metasploit)2010-04-30 · remote · linux · Verified
- Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (3)2006-08-14 · remote · linux · Verified
- Cyrus IMAPD 2.3.2 - 'pop3d' Remote Buffer Overflow (1)2006-05-21 · remote · linux · Verified
Impact
Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cyrus | Imapd | Version 2.3.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0527.html
- http://securitytracker.com/id?1016131
- http://www.securityfocus.com/bid/18056
- http://www.vupen.com/english/advisories/2006/1891
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26578
- http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0527.html
- http://securitytracker.com/id?1016131
- http://www.securityfocus.com/bid/18056
- http://www.vupen.com/english/advisories/2006/1891
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26578