VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 30, 2001· Updated Jun 16, 2026

CVE-2001-1154

CVE-2001-1154

Description

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.

Affected products

5
  • Carnegie Mellon University/Cyrus IMAP Server3 versions
    cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:1.6.24:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:1.6.24:*:*:*:*:*:*:*
    • cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:2.0.15:*:*:*:*:*:*:*
    • cpe:2.3:a:carnegie_mellon_university:cyrus_imap_server:2.0.16:*:*:*:*:*:*:*
  • Bsdi/BSD OS
    cpe:2.3:o:bsdi:bsd_os:4.2:*:*:*:*:*:*:*
  • Cyrus/IMAPllm-create
    Range: <=2.0.16 || =1.6.24

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.