ByteOS Network

NVD Vulnerability Details :

CVE-2011-3481

Deferred

Source-cve@mitre.org

Published At-14 Sep, 2011 | 17:17

Updated At-11 Apr, 2025 | 00:51

The index_get_ids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P

CPE Matches

cmu>>cyrus_imap_server>>Versions up to 2.4.10(inclusive)

cpe:2.3:a:cmu:cyrus_imap_server:*:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.0.17

cpe:2.3:a:cmu:cyrus_imap_server:2.0.17:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.1.16

cpe:2.3:a:cmu:cyrus_imap_server:2.1.16:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.1.17

cpe:2.3:a:cmu:cyrus_imap_server:2.1.17:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.1.18

cpe:2.3:a:cmu:cyrus_imap_server:2.1.18:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.2.8

cpe:2.3:a:cmu:cyrus_imap_server:2.2.8:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.2.9

cpe:2.3:a:cmu:cyrus_imap_server:2.2.9:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.2.10

cpe:2.3:a:cmu:cyrus_imap_server:2.2.10:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.2.11

cpe:2.3:a:cmu:cyrus_imap_server:2.2.11:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.2.12

cpe:2.3:a:cmu:cyrus_imap_server:2.2.12:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.2.13

cpe:2.3:a:cmu:cyrus_imap_server:2.2.13:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.2.13p1

cpe:2.3:a:cmu:cyrus_imap_server:2.2.13p1:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.0

cpe:2.3:a:cmu:cyrus_imap_server:2.3.0:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.1

cpe:2.3:a:cmu:cyrus_imap_server:2.3.1:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.2

cpe:2.3:a:cmu:cyrus_imap_server:2.3.2:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.3

cpe:2.3:a:cmu:cyrus_imap_server:2.3.3:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.4

cpe:2.3:a:cmu:cyrus_imap_server:2.3.4:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.5

cpe:2.3:a:cmu:cyrus_imap_server:2.3.5:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.6

cpe:2.3:a:cmu:cyrus_imap_server:2.3.6:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.7

cpe:2.3:a:cmu:cyrus_imap_server:2.3.7:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.8

cpe:2.3:a:cmu:cyrus_imap_server:2.3.8:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.9

cpe:2.3:a:cmu:cyrus_imap_server:2.3.9:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.10

cpe:2.3:a:cmu:cyrus_imap_server:2.3.10:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.11

cpe:2.3:a:cmu:cyrus_imap_server:2.3.11:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.12

cpe:2.3:a:cmu:cyrus_imap_server:2.3.12:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.13

cpe:2.3:a:cmu:cyrus_imap_server:2.3.13:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.14

cpe:2.3:a:cmu:cyrus_imap_server:2.3.14:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.15

cpe:2.3:a:cmu:cyrus_imap_server:2.3.15:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.16

cpe:2.3:a:cmu:cyrus_imap_server:2.3.16:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.3.17

cpe:2.3:a:cmu:cyrus_imap_server:2.3.17:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.4.0

cpe:2.3:a:cmu:cyrus_imap_server:2.4.0:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.4.1

cpe:2.3:a:cmu:cyrus_imap_server:2.4.1:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.4.2

cpe:2.3:a:cmu:cyrus_imap_server:2.4.2:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.4.3

cpe:2.3:a:cmu:cyrus_imap_server:2.4.3:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.4.4

cpe:2.3:a:cmu:cyrus_imap_server:2.4.4:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.4.5

cpe:2.3:a:cmu:cyrus_imap_server:2.4.5:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.4.6

cpe:2.3:a:cmu:cyrus_imap_server:2.4.6:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.4.7

cpe:2.3:a:cmu:cyrus_imap_server:2.4.7:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.4.8

cpe:2.3:a:cmu:cyrus_imap_server:2.4.8:*:*:*:*:*:*:*

cmu>>cyrus_imap_server>>2.4.9

cpe:2.3:a:cmu:cyrus_imap_server:2.4.9:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

Evaluator Description

Per: http://cwe.mitre.org/data/definitions/476.html 'CWE-476: NULL Pointer Dereference'

References

Hyperlink	Source	Resource
http://bugzilla.cyrusimap.org/show_bug.cgi?id=2772	cve@mitre.org	N/A
http://bugzilla.cyrusimap.org/show_bug.cgi?id=3463	cve@mitre.org	N/A
http://git.cyrusimap.org/cyrus-imapd/commit/?id=6e776956a1a9dfa58eacdd0ddd52644009eac9e5	cve@mitre.org	Patch
http://www.mandriva.com/security/advisories?name=MDVSA-2012:037	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2011-1508.html	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/69842	cve@mitre.org	N/A
http://bugzilla.cyrusimap.org/show_bug.cgi?id=2772	af854a3a-2127-422b-91ae-364da2661108	N/A
http://bugzilla.cyrusimap.org/show_bug.cgi?id=3463	af854a3a-2127-422b-91ae-364da2661108	N/A
http://git.cyrusimap.org/cyrus-imapd/commit/?id=6e776956a1a9dfa58eacdd0ddd52644009eac9e5	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.mandriva.com/security/advisories?name=MDVSA-2012:037	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2011-1508.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/69842	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History