CVE-2005-0546
Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary...
Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.
- Record
CVE-2005-0546- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.
- Record
CVE-2005-0546- Updated
- 2026-11-02
EUVDEUVD-2005-0547 No score
Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.
- Record
EUVD-2005-0547- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-734w-q42p-q63v No score
Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary...
Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.
- Record
GHSA-734w-q42p-q63v- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cyrus-imapdRed Hat:enterprise_linux:4::as |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-develRed Hat:enterprise_linux:4::as |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-murderRed Hat:enterprise_linux:4::as |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-nntpRed Hat:enterprise_linux:4::as |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-utilsRed Hat:enterprise_linux:4::as |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
perl-CyrusRed Hat:enterprise_linux:4::as |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapdRed Hat:enterprise_linux:4::desktop |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-develRed Hat:enterprise_linux:4::desktop |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-murderRed Hat:enterprise_linux:4::desktop |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-nntpRed Hat:enterprise_linux:4::desktop |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cyrus-imapd-utilsRed Hat:enterprise_linux:4::desktop |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
perl-CyrusRed Hat:enterprise_linux:4::desktop |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapdRed Hat:enterprise_linux:4::es |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-develRed Hat:enterprise_linux:4::es |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-murderRed Hat:enterprise_linux:4::es |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-nntpRed Hat:enterprise_linux:4::es |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-utilsRed Hat:enterprise_linux:4::es |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
perl-CyrusRed Hat:enterprise_linux:4::es |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapdRed Hat:enterprise_linux:4::ws |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-develRed Hat:enterprise_linux:4::ws |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-murderRed Hat:enterprise_linux:4::ws |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-nntpRed Hat:enterprise_linux:4::ws |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
cyrus-imapd-utilsRed Hat:enterprise_linux:4::ws |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
perl-CyrusRed Hat:enterprise_linux:4::ws |
before 0:2.2.12-3.RHEL4.1 | 0:2.2.12-3.RHEL4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0546 is a high vulnerability (CVSS 7.5) in Cyrus Imapd, published February 25, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.24%, the 91st percentile. Fixed in cyrus-imapd 0:2.2.12-3.RHEL4.1.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10674
secunia.com/advisories/14383
marc.info?l=bugtraq&m=110972236203397&w=2
mandriva.com/security/advisories?name=MDKSA-2005:051
securitytracker.com/id?1013278
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000937
Show 15 moreShow less
security.gentoo.org/glsa/glsa-200502-29.xml
securityfocus.com/archive/1/430294/100/0/threaded
asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723
bugs.gentoo.org/show_bug.cgi?id=82404
redhat.com/support/errata/RHSA-2005-408.html
nvd.nist.gov/vuln/detail/CVE-2005-0546
github.com/advisories/GHSA-734w-q42p-q63v
access.redhat.com/errata/RHSA-2005:408
bugzilla.redhat.com/show_bug.cgi?id=149869
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_408.json
cve.org/CVERecord?id=CVE-2005-0546