NVD

Id
10026  
Name
CVE-2011-3372  
Description
imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-12-24  
Modified Date
2011-12-26  
Seq
2011-3372  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
57505 10026 CVE-2011-3372 http://cyrusimap.org/mediawiki/index.php/Latest_Updates  View
57506 10026 CVE-2011-3372 http://git.cyrusimap.org/cyrus-imapd/commit/?id=77903669e04c9788460561dd0560b9c916519594  View
57507 10026 CVE-2011-3372 1026363  View
57508 10026 CVE-2011-3372 DSA-2318  View
57509 10026 CVE-2011-3372 MDVSA-2011:149  View
57510 10026 CVE-2011-3372 RHSA-2011:1508  View
57511 10026 CVE-2011-3372 https://bugzilla.redhat.com/show_bug.cgi?id=740822  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33283 JVNDB-2011-003523 Cyrus IMAPd の NNTP サーバ (nntpd) 内の imap/nntpd.c における認証を回避される脆弱性 Cyrus IMAPd の NNTP サーバ (nntpd) 内の imap/nntpd.c には、認証を回避される脆弱性が存在します。 CVE-2011-3372 51279 CVE-2011-3372 10026 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003523.html 2011-12-24 2011-12-28 View