CVE-2006-2502
medium · 5.1Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command.
5.1
CVSS
53.3%
EPSS (exploit prob.)
99th
EPSS percentile
2006-05-22
Published
AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| cyrus | imapd | 2.3.2 |
Check a specific version with /api/v1/cve/match.
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0527.html
- http://securitytracker.com/id?1016131
- http://www.securityfocus.com/bid/18056
- http://www.vupen.com/english/advisories/2006/1891
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26578
- http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0527.html
- http://securitytracker.com/id?1016131
- http://www.securityfocus.com/bid/18056
- http://www.vupen.com/english/advisories/2006/1891
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26578
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2006-2502