CVE-2019-11356

Published: Jun 3, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.cyrusimap.org/imap/download/release-notes/2.5/index.html

x_refsource_MISC

https://www.cyrusimap.org/imap/download/release-notes/3.0/index.html

x_refsource_MISC

https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.13.html

x_refsource_MISC

https://www.cyrusimap.org/imap/download/release-notes/3.0/x/3.0.10.html

x_refsource_MISC

FEDORA-2019-309f559057

vendor-advisory

x_refsource_FEDORA

FEDORA-2019-f0435555ac

vendor-advisory

x_refsource_FEDORA

DSA-4458

vendor-advisory

x_refsource_DEBIAN

20190609 [SECURITY] [DSA 4458-1] cyrus-imapd security update

mailing-list

x_refsource_BUGTRAQ

RHSA-2019:1771

vendor-advisory

x_refsource_REDHAT

USN-4566-1

vendor-advisory

x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-11356

Description

Affected Products

References