Cyrus IMAP Server 'split_wildmats()' Remote Buffer Overflow Vulnerability

Bugtraq ID:	49534
Class:	Boundary Condition Error
CVE:	CVE-2011-3208
Remote:	Yes
Local:	No
Published:	Sep 09 2011 12:00AM
Updated:	May 07 2015 05:11PM
Credit:	Greg Banks
Vulnerable:	Redhat Enterprise Linux WS 4 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 Mandriva Linux Mandrake 2010.1 x86_64 Mandriva Linux Mandrake 2010.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Kolab Kolab Groupware Server 2.2.4 Kolab Kolab Groupware Server 2.3.2 Kolab Kolab Groupware Server 2.3.1 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Cmu Cyrus IMAP Server 2.4.10 Cmu Cyrus IMAP Server 2.4.10 Cmu Cyrus IMAP Server 2.4.9 Cmu Cyrus IMAP Server 2.4.8 Cmu Cyrus IMAP Server 2.4.7 Cmu Cyrus IMAP Server 2.4.6 Cmu Cyrus IMAP Server 2.3.16 Cmu Cyrus IMAP Server 2.3.16 Cmu Cyrus IMAP Server 2.3.15 Cmu Cyrus IMAP Server 2.3.15 Cmu Cyrus IMAP Server 2.3.14 Cmu Cyrus IMAP Server 2.3.14 Cmu Cyrus IMAP Server 2.3.13 Cmu Cyrus IMAP Server 2.3.12 Cmu Cyrus IMAP Server 2.3.11 Cmu Cyrus IMAP Server 2.3.10 Cmu Cyrus IMAP Server 2.3.8 Cmu Cyrus IMAP Server 2.3.8 Cmu Cyrus IMAP Server 2.3.7 Cmu Cyrus IMAP Server 2.3.6 Cmu Cyrus IMAP Server 2.3.5 Cmu Cyrus IMAP Server 2.3.4 Cmu Cyrus IMAP Server 2.3.3 Cmu Cyrus IMAP Server 2.3.2 Cmu Cyrus IMAP Server 2.2.13 Cmu Cyrus IMAP Server 2.2.12 Cmu Cyrus IMAP Server 2.2.11 Cmu Cyrus IMAP Server 2.2.10 Cmu Cyrus IMAP Server 2.2.9 Cmu Cyrus IMAP Server 2.1.18 Cmu Cyrus IMAP Server 2.1.17 Cmu Cyrus IMAP Server 2.1.16 Cmu Cyrus IMAP Server 2.0.17 Cmu Cyrus IMAP Server 2.4.5 Cmu Cyrus IMAP Server 2.4.4 Cmu Cyrus IMAP Server 2.4.3 Cmu Cyrus IMAP Server 2.4.2 Cmu Cyrus IMAP Server 2.4.1 Cmu Cyrus IMAP Server 2.4.0 Cmu Cyrus IMAP Server 2.3.12P2 Cmu Cyrus IMAP Server 2.3.12P1 Cmu Cyrus IMAP Server 2.3.1 Cmu Cyrus IMAP Server 2.3.0 Cmu Cyrus IMAP Server 2.2.8 Cmu Cyrus IMAP Server 2.2.13P1
Not Vulnerable:	Kolab Kolab Groupware Server 2.3.3 Cmu Cyrus IMAP Server 2.4.11 Cmu Cyrus IMAP Server 2.3.17

Cyrus IMAP Server 'split_wildmats()' Remote Buffer Overflow Vulnerability

Cyrus IMAP Server is prone to a remote buffer-overflow vulnerability because the application fails to properly bounds check user-supplied data before copying it into an insufficiently sized buffer.

Attackers can execute arbitrary code in the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Cyrus IMAP Server versions prior to 2.3.17 and 2.4.11 are vulnerable.

Cyrus IMAP Server 'split_wildmats()' Remote Buffer Overflow Vulnerability

A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.

Cyrus IMAP Server 'split_wildmats()' Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Mandriva Linux Mandrake 2010.1 x86_64

• Mandriva cyrus-imapd-2.3.15-10.3mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-devel-2.3.15-10.3mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-murder-2.3.15-10.3mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-nntp-2.3.15-10.3mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-utils-2.3.15-10.3mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva perl-Cyrus-2.3.15-10.3mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-3.1-14.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-cachemgr-3.1-14.2mdv2010.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2009.0 x86_64

• Mandriva cyrus-imapd-2.3.12-0.p2.4.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-devel-2.3.12-0.p2.4.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-murder-2.3.12-0.p2.4.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-nntp-2.3.12-0.p2.4.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-utils-2.3.12-0.p2.4.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva perl-Cyrus-2.3.12-0.p2.4.3mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-3.0-22.5mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-cachemgr-3.0-22.5mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva cyrus-imapd-2.3.12-0.p2.4.3mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-devel-2.3.12-0.p2.4.3mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-murder-2.3.12-0.p2.4.3mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-nntp-2.3.12-0.p2.4.3mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-utils-2.3.12-0.p2.4.3mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva perl-Cyrus-2.3.12-0.p2.4.3mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-3.0-22.5mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-cachemgr-3.0-22.5mdvmes5.2.x86_64.rpm
  http://www.mandriva.com/en/downloads/

MandrakeSoft Enterprise Server 5

• Mandriva cyrus-imapd-2.3.12-0.p2.4.3mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-devel-2.3.12-0.p2.4.3mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-murder-2.3.12-0.p2.4.3mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-nntp-2.3.12-0.p2.4.3mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-utils-2.3.12-0.p2.4.3mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva perl-Cyrus-2.3.12-0.p2.4.3mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-3.0-22.5mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-cachemgr-3.0-22.5mdvmes5.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2010.1

• Mandriva cyrus-imapd-2.3.15-10.3mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-devel-2.3.15-10.3mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-murder-2.3.15-10.3mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-nntp-2.3.15-10.3mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-utils-2.3.15-10.3mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva perl-Cyrus-2.3.15-10.3mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-3.1-14.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-cachemgr-3.1-14.2mdv2010.2.i586.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2009.0

• Mandriva cyrus-imapd-2.3.12-0.p2.4.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-devel-2.3.12-0.p2.4.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-murder-2.3.12-0.p2.4.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-nntp-2.3.12-0.p2.4.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-utils-2.3.12-0.p2.4.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva perl-Cyrus-2.3.12-0.p2.4.3mdv2009.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-3.0-22.5mdv2009.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva squid-cachemgr-3.0-22.5mdv2009.0.i586.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2011 x86_64

• Mandriva cyrus-imapd-2.3.16-7.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-devel-2.3.16-7.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-murder-2.3.16-7.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-nntp-2.3.16-7.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-utils-2.3.16-7.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva perl-Cyrus-2.3.16-7.1-mdv2011.0.x86_64.rpm
  http://www.mandriva.com/en/downloads/

Mandriva Linux Mandrake 2011

• Mandriva cyrus-imapd-2.3.16-7.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-devel-2.3.16-7.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-murder-2.3.16-7.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-nntp-2.3.16-7.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva cyrus-imapd-utils-2.3.16-7.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva perl-Cyrus-2.3.16-7.1-mdv2011.0.i586.rpm
  http://www.mandriva.com/en/downloads/

Cyrus IMAP Server 'split_wildmats()' Remote Buffer Overflow Vulnerability

References:

• [Kolab-announce] Announcing the Kolab Server 2.3.3 (Kolab)
  
• archive.cyrus-announce - 85 (Cyrus)
  
• archive.cyrus-announce - 86 (Cyrus)
  
• Vendor Homepage (Cyrus)