ALT-PU-2019-2472-1
Package cyrus-imapd updated to version 3.0.11-alt1 for branch p9 in task 236018.
Closed vulnerabilities
Published: 2019-06-06
BDU:2019-02901
Уязвимость функции CalDAV серверного демона httpd из состава IMAP-сервера Cyrus, позволяющая нарушителю оказать воздействие на целостность данных, получить доступ к конфиденциальным данным, вызвать отказ в обслуживании, а также выполнить произвольный код
Severity: CRITICAL (9.8)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2019-06-03
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2019-11356
The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- RHSA-2019:1771
- RHSA-2019:1771
- FEDORA-2019-309f559057
- FEDORA-2019-309f559057
- FEDORA-2019-f0435555ac
- FEDORA-2019-f0435555ac
- 20190609 [SECURITY] [DSA 4458-1] cyrus-imapd security update
- 20190609 [SECURITY] [DSA 4458-1] cyrus-imapd security update
- USN-4566-1
- USN-4566-1
- https://www.cyrusimap.org/imap/download/release-notes/2.5/index.html
- https://www.cyrusimap.org/imap/download/release-notes/2.5/index.html
- https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.13.html
- https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.13.html
- https://www.cyrusimap.org/imap/download/release-notes/3.0/index.html
- https://www.cyrusimap.org/imap/download/release-notes/3.0/index.html
- https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.10.html
- https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.10.html
- DSA-4458
- DSA-4458