OpenPKG Security Advisory

Publisher Name:          OpenPKG GmbH
Publisher Home:          http://openpkg.com/

Advisory Id (public):    OpenPKG-SA-2005.005
Advisory Type:           OpenPKG Security Advisory (SA)
Advisory Directory:      http://openpkg.com/go/OpenPKG-SA
Advisory Document:       http://openpkg.com/go/OpenPKG-SA-2005.005
Advisory Published:      2008-10-06 23:08 UTC

Issue Id (internal):     OpenPKG-SI-20050405.01
Issue First Created:     2005-04-05
Issue Last Modified:     2006-11-28
Issue Revision:          05


Subject Name:            IMAPd
Subject Summary:         Cyrus IMAP Server
Subject Home:            http://asg.web.cmu.edu/cyrus/imapd/
Subject Versions:        * <= 2.2.10

Vulnerability Id:        CVE-2005-0546
Vulnerability Scope:     global (not OpenPKG specific)

Attack Feasibility:      run-time
Attack Vector:           remote network
Attack Impact:           arbitrary code execution

Description:
    Sean Larsson discovered [1] several vulnerabilities in the Cyrus IMAP
    Server [0] that could allow a remote attacker to execute machine code
    in the context of the server process.
    
    The Cyrus Electronic Messaging Project identified the affected
    server logic and released a security advisory [1]. Essentially,
    the application is affected by multiple one byte buffer overflows
    affecting the IMAP annotate extension and cached header handling
    routines. Additionally, stack based overflows affecting the fetchnews,
    backend, and imapd logic exist as well.

References:
    [0] http://asg.web.cmu.edu/cyrus/imapd/
    [1] http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723
    [2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0546
    [3] http://www.openpkg.org/tutorial.html#regular-source
    [4] http://www.openpkg.org/tutorial.html#regular-binary
    [5] ftp://ftp.openpkg.org/release/2.2/UPD/imapd-2.2.8-2.2.2.src.rpm
    [6] ftp://ftp.openpkg.org/release/2.2/UPD/
    [7] http://www.openpkg.org/security.html#signature


Primary Package Name:    imapd
Primary Package Home:    http://openpkg.org/go/package/imapd

Affected Distribution:   Affected Branch:  Affected Package:
OpenPKG Community        2.2-SOLID         imapd-2.2.8-2.2.1
OpenPKG Community        CURRENT           imapd-2.2.10-20050129

Corrected Distribution:  Corrected Branch: Corrected Package:
OpenPKG Community        2.2-SOLID         imapd-2.2.8-2.2.2
OpenPKG Community        CURRENT           imapd-2.2.11-20050214