CVE-2002-1580

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000557Vendor Advisory
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557
http://www.debian.org/security/2002/dsa-215
http://www.kb.cert.org/vuls/id/740169Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/archive/1/301864Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/6298Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/10744
http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000557Vendor Advisory
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557
http://www.debian.org/security/2002/dsa-215
http://www.kb.cert.org/vuls/id/740169Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/archive/1/301864Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/6298Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/10744

Timeline

Published: Jun 14, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-15815.0Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via CVE-2002-158210.0compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrar CVE-2002-15837.2Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a lon CVE-2002-158410.0Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platf CVE-2002-15855.0Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain CVE-2002-15862.1Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget CVE-2002-15872.1The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang) of an application CVE-2002-15885.0Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and cra CVE-2002-15892.1Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF_DEADBEEF, or deadbeef) is set in the kmem_flags kernel parameter, allow CVE-2002-15907.2The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed u CVE-2002-15917.5AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could all CVE-2002-15925.0The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that