CVE-2002-1580 - CVE House
Back to Database
Status published High CVE-2002-1580

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and...

Vulnerability Description

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-1580

Credits & Attribution

No credits recorded in the NVD database.

References

More from carnegie mellon university

View All →
CVE-2009-0688
Multiple buffer overflows in the CMU Cyrus SASL library before...
High 7.5
CVE-2006-0250
Format string vulnerability in the snmp_input function in snmptrapd in...
Medium 6.4
CVE-2004-1067
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server...
Critical 10
CVE-2004-1015
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and...
Critical 10
CVE-2004-1013
The argument parser of the FETCH command in Cyrus IMAP...
Critical 10

Affected Vendor

carnegie mellon university

View all reports →

Affected Software

cyrus imap server
Vulnerable Versions:
1.4, 1.5.19, 2.0.12, 2.0.16, 2.1.9, 2.1.10

Timeline

Official Publish: May 20th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.