← Vulnerability feed

Vulnerability record · CVE-2005-0546 · published 2 May 2005

CVE-2005-0546: Cyrus imapd vulnerability

Cyrus · Imapd

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.

7.5 CVSS 2.0 High EPSS 4.2% · top 9.3%
7.5CVSS 2.0 base score
4.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
24References
16 Jun 2026Last modified by NVD

Description

Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723 Patch
http://bugs.gentoo.org/show_bug.cgi?id=82404
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000937 Vendor Advisory
http://marc.info/?l=bugtraq&m=110972236203397&w=2
http://secunia.com/advisories/14383 PatchVendor Advisory
http://security.gentoo.org/glsa/glsa-200502-29.xml PatchVendor Advisory
http://securitytracker.com/id?1013278
http://www.mandriva.com/security/advisories?name=MDKSA-2005:051
http://www.redhat.com/support/errata/RHSA-2005-408.html
http://www.securityfocus.com/archive/1/430294/100/0/threaded
http://www.securityfocus.com/bid/12636
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10674
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723 Patch
http://bugs.gentoo.org/show_bug.cgi?id=82404
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000937 Vendor Advisory
http://marc.info/?l=bugtraq&m=110972236203397&w=2
http://secunia.com/advisories/14383 PatchVendor Advisory
http://security.gentoo.org/glsa/glsa-200502-29.xml PatchVendor Advisory
http://securitytracker.com/id?1013278
http://www.mandriva.com/security/advisories?name=MDKSA-2005:051
http://www.redhat.com/support/errata/RHSA-2005-408.html
http://www.securityfocus.com/archive/1/430294/100/0/threaded
http://www.securityfocus.com/bid/12636
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10674

Track CVE-2005-0546 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2011-3372Cyrus imapd improper authentication vulnerabilityimap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO U…EPSS 3.3%5.1CVE-2006-2502Cyrus IMAPD pop3d stack buffer overflow via long USER commandCyrus IMAPD 2.3.2 contains a stack-based buffer overflow in pop3d when the popsubfolders option is enabled. A remote attacker can send an overly long…EPSS 53%analysed

Source: NIST National Vulnerability Database (record CVE-2005-0546), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.