CVE-2011-3481: Null Pointer Dereference
The indexgetids function in index.c in imapd in Cyrus IMAP Server before 2.4.11, when server-side threading is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted References header in an e-mail message.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3481?
CVE-2011-3481 has a medium severity rating, as it allows for denial of service attacks due to null pointer dereference.
How do I fix CVE-2011-3481?
To fix CVE-2011-3481, upgrade your Cyrus IMAP Server to version 2.4.11 or later.
What versions of Cyrus IMAP Server are affected by CVE-2011-3481?
CVE-2011-3481 affects Cyrus IMAP Server versions prior to 2.4.11, including several 2.2.x, 2.3.x, and 2.4.x versions.
What are the potential impacts of CVE-2011-3481?
The potential impacts of CVE-2011-3481 include server crashes and denial of service, affecting the availability of email services.
Can CVE-2011-3481 be exploited remotely?
Yes, CVE-2011-3481 can be exploited remotely by sending a specially crafted email with a malicious References header.