← Vulnerability feed

Vulnerability record · CVE-2002-1580 · published 14 June 2004

CVE-2002-1580: Carnegie mellon university cyrus imap server vulnerability

CCarnegie Mellon University · Cyrus Imap Server

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.

7.5 CVSS 2.0 High EPSS 17% · top 3.1%
7.5CVSS 2.0 base score
17%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
16References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000557 Vendor Advisory
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557
http://www.debian.org/security/2002/dsa-215
http://www.kb.cert.org/vuls/id/740169 PatchThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/archive/1/301864 ExploitPatchVendor Advisory
http://www.securityfocus.com/bid/6298 ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/10744
http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000557 Vendor Advisory
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557
http://www.debian.org/security/2002/dsa-215
http://www.kb.cert.org/vuls/id/740169 PatchThird Party AdvisoryUS Government Resource
http://www.securityfocus.com/archive/1/301864 ExploitPatchVendor Advisory
http://www.securityfocus.com/bid/6298 ExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/10744

Track CVE-2002-1580 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-1011Carnegie mellon university cyrus imap server vulnerabilityStack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbit…EPSS 5.8%10.0CVE-2004-1012Carnegie mellon university cyrus imap server vulnerabilityThe argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a c…EPSS 6.0%10.0CVE-2004-1013Carnegie mellon university cyrus imap server vulnerabilityThe argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via cer…EPSS 5.8%10.0CVE-2004-1015Carnegie mellon university cyrus imap server vulnerabilityBuffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbit…EPSS 5.2%10.0CVE-2004-1067Carnegie mellon university cyrus imap server vulnerabilityOff-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attacker…EPSS 5.2%5.0CVE-2001-1154Carnegie mellon university cyrus imap server vulnerabilityCyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.EPSS 1.6%

Source: NIST National Vulnerability Database (record CVE-2002-1580), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.