February 2005

ID: 00164
Ref: 147/2005
Date: 24 February 2005:14:04:11
Version: 1

---

Title: Gentoo Linux Security Advisory - GLSA 200502-29 - Cyrus IMAP Server: Multiple overflow vulnerabilities
Abstract: Possible single byte overflows have been found in the imapd annotate extension and mailbox handling code. Furthermore stack buffer overflows have been found in fetchnews, the backend and imapd.
Vendors affected: Gentoo
Operating systems affected: Gentoo
Applications affected: Gentoo

---

Title
=====

Gentoo Linux Security Advisory - GLSA 200502-29 - Cyrus IMAP Server:
Multiple overflow vulnerabilities

Detail
======

Possible single byte overflows have been found in the imapd annotate
extension and mailbox handling code. Furthermore stack buffer overflows
have been found in fetchnews, the backend and imapd.





- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200502-29
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: Normal
Title: Cyrus IMAP Server: Multiple overflow vulnerabilities
Date: February 23, 2005
Bugs: #82404
ID: 200502-29

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Synopsis
========

The Cyrus IMAP Server is affected by several overflow vulnerabilities
which could potentially lead to the remote execution of arbitrary code.

Background
==========

The Cyrus IMAP Server is an efficient, highly-scalable IMAP e-mail server.

Affected packages
=================

-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-mail/cyrus-imapd < 2.2.12 >= 2.2.12

Description
===========

Possible single byte overflows have been found in the imapd annotate
extension and mailbox handling code. Furthermore stack buffer overflows
have been found in fetchnews, the backend and imapd.

Impact
======

An attacker, who could be an authenticated user or an admin of a
peering news server, could exploit these vulnerabilities to execute
arbitrary code with the rights of the user running the Cyrus IMAP Server.

Workaround
==========

There is no known workaround at this time.

Resolution
==========

All Cyrus IMAP Server users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-mail/cyrus-imapd-2.2.12"

References
==========

[ 1 ] Cyrus IMAP Announcement
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723

Availability
============

This GLSA and any updates to it are available for viewing at the
Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-200502-29.xml

Concerns?
=========

Security is a primary focus of Gentoo Linux and ensuring the confidentiality
and security of our users machines is of utmost importance to us. Any
security concerns should be addressed to security@gentoo.org or alternatively,
you may file a bug at http://bugs.gentoo.org.

License
=======

Copyright 2005 Gentoo Foundation, Inc; referenced text
belongs to its owner(s).

The contents of this document are licensed under the
Creative Commons - Attribution / Share Alike license.

http://creativecommons.org/licenses/by-sa/2.0