Launchpad CVE tracker

CVE 2011-3208

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.

Related bugs and status

CVE-2011-3208 (Candidate) is related to these bugs:

Bug #880914: Stack-based buffer overflow in the split_wildmats function in nntpd.c

		In	Importance	Status
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.2 (Ubuntu)	Medium	Invalid
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.4 (Ubuntu)	Medium	Fix Released
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	kolab-cyrus-imapd (Ubuntu)	Medium	Invalid
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.2 (Ubuntu Precise)	Medium	Won't Fix
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.4 (Ubuntu Precise)	Medium	Fix Released
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	kolab-cyrus-imapd (Ubuntu Precise)	Medium	Won't Fix
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.2 (Ubuntu Oneiric)	Medium	Won't Fix
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.4 (Ubuntu Oneiric)	Medium	Won't Fix
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	kolab-cyrus-imapd (Ubuntu Oneiric)	Medium	Won't Fix
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.2 (Ubuntu Maverick)	Medium	Fix Released
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.4 (Ubuntu Maverick)	Medium	Invalid
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	kolab-cyrus-imapd (Ubuntu Maverick)	Medium	Won't Fix
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.2 (Ubuntu Natty)	Medium	Won't Fix
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.4 (Ubuntu Natty)	Medium	Invalid
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	kolab-cyrus-imapd (Ubuntu Natty)	Medium	Won't Fix
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.2 (Ubuntu Hardy)	Medium	Won't Fix
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.4 (Ubuntu Hardy)	Medium	Invalid
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	kolab-cyrus-imapd (Ubuntu Hardy)	Medium	Won't Fix
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.2 (Ubuntu Lucid)	Medium	Fix Released
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	cyrus-imapd-2.4 (Ubuntu Lucid)	Medium	Invalid
880914	Stack-based buffer overflow in the split_wildmats function in nntpd.c	kolab-cyrus-imapd (Ubuntu Lucid)	Medium	Won't Fix

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2011-3208

References