Every CVE Search/ Get API key

CVE-2011-3208

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP...

7.5 HighFix available

CVE-2011-3208 is a high vulnerability (CVSS 7.5) in Cmu Cyrus Imap Server, published September 14, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.37%, the 92nd percentile. Fixed in cyrus-imapd-2.2 2.2.13-19+squeeze2.

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.

Exploit likelihood

5.37%Down 6.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.

Record
CVE-2011-3208
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.

Record
CVE-2011-3208
Updated
2026-11-02
EUVDEUVD-2011-3172 No score

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.

Record
EUVD-2011-3172
Updated
2026-11-03
GitHub AdvisoriesGHSA-46rx-vcfq-hxc2 No score

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP...

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.

Record
GHSA-46rx-vcfq-hxc2
Weakness
CWE-119
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cyrus-imapd-2.2
Debian:6.0
 before 2.2.13-19+squeeze2, plus listed versions
2.2.13-192.2.13-19+squeeze1
2.2.13-19+squeeze2
cyrus-imapd-2.2
Debian:5.0
 before 2.2.13-14+lenny5, plus listed versions
2.2.13-142.2.13-14+lenny12.2.13-14+lenny32.2.13-14+lenny4
2.2.13-14+lenny5
cyrus-imapd
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-devel
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-murder
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-nntp
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-utils
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
perl-Cyrus
Red Hat:enterprise_linux:4::as
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
Show 34 moreShow less
Affected packages
PackageAffectedFixed
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-devel
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-murder
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-nntp
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-utils
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
perl-Cyrus
Red Hat:enterprise_linux:4::desktop
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-devel
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-murder
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-nntp
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-utils
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
perl-Cyrus
Red Hat:enterprise_linux:4::es
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-devel
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-murder
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-nntp
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd-utils
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
perl-Cyrus
Red Hat:enterprise_linux:4::ws
 before 0:2.2.12-16.el4
0:2.2.12-16.el4
cyrus-imapd
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.3.7-12.el5_7.1
0:2.3.7-12.el5_7.1
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.3.7-12.el5_7.1
0:2.3.7-12.el5_7.1
cyrus-imapd-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.3.7-12.el5_7.1
0:2.3.7-12.el5_7.1
cyrus-imapd-perl
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.3.7-12.el5_7.1
0:2.3.7-12.el5_7.1
cyrus-imapd-utils
Red Hat:enterprise_linux:5::client_workstation
 before 0:2.3.7-12.el5_7.1
0:2.3.7-12.el5_7.1
cyrus-imapd
Red Hat:enterprise_linux:5::server
 before 0:2.3.7-12.el5_7.1
0:2.3.7-12.el5_7.1
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:2.3.7-12.el5_7.1
0:2.3.7-12.el5_7.1
cyrus-imapd-devel
Red Hat:enterprise_linux:5::server
 before 0:2.3.7-12.el5_7.1
0:2.3.7-12.el5_7.1
cyrus-imapd-perl
Red Hat:enterprise_linux:5::server
 before 0:2.3.7-12.el5_7.1
0:2.3.7-12.el5_7.1
cyrus-imapd-utils
Red Hat:enterprise_linux:5::server
 before 0:2.3.7-12.el5_7.1
0:2.3.7-12.el5_7.1
cyrus-imapd
Red Hat:enterprise_linux:6::server
 before 0:2.3.16-6.el6_1.3
0:2.3.16-6.el6_1.3
cyrus-imapd-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.3.16-6.el6_1.3
0:2.3.16-6.el6_1.3
cyrus-imapd-utils
Red Hat:enterprise_linux:6::server
 before 0:2.3.16-6.el6_1.3
0:2.3.16-6.el6_1.3
cyrus-imapd-devel
Red Hat:enterprise_linux:6::server
 before 0:2.3.16-6.el6_1.3
0:2.3.16-6.el6_1.3

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open