CVE-2011-3372

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.36%

Published

Dec 24, 2011

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.

Weaknesses (CWE)

CWE-287

Affected Products (1)

cyrus · imapdvulnerable

References (18)

http://cyrusimap.org/mediawiki/index.php/Latest_Updates

http://git.cyrusimap.org/cyrus-imapd/commit/?id=77903669e04c9788460561dd0560b9c916519594

http://secunia.com/advisories/46093

Vendor Advisory

http://secunia.com/secunia_research/2011-68

Vendor Advisory

http://securitytracker.com/id?1026363

http://www.debian.org/security/2011/dsa-2318

http://www.mandriva.com/security/advisories?name=MDVSA-2011:149

http://www.redhat.com/support/errata/RHSA-2011-1508.html

https://bugzilla.redhat.com/show_bug.cgi?id=740822

http://cyrusimap.org/mediawiki/index.php/Latest_Updates

http://git.cyrusimap.org/cyrus-imapd/commit/?id=77903669e04c9788460561dd0560b9c916519594

http://secunia.com/advisories/46093

Vendor Advisory

http://secunia.com/secunia_research/2011-68

Vendor Advisory

http://securitytracker.com/id?1026363

http://www.debian.org/security/2011/dsa-2318

http://www.mandriva.com/security/advisories?name=MDVSA-2011:149

http://www.redhat.com/support/errata/RHSA-2011-1508.html

https://bugzilla.redhat.com/show_bug.cgi?id=740822

KEV Catalog EPSS Scores Vendors All CVEs