REDHAT-BUG-705288: Medium severity cyrus sasl vulnerability
It was found, that Cyrus IMAP recognized IMAP, LMTP, NNTP and POP3 protocol commands during plaintex to TLS session switch (by TLS protocol initialization). A remote attacker could use this flaw to insert plaintext, protocol relevant, commands into TLS protocol initialization messages, leading to execution of these commands during the ciphertext protocol phase, potentially allowing the attacker to steal the victim's mail or authentication credentials.
References: [1] http://www.kb.cert.org/vuls/id/555316 [2] http://bugzilla.cyrusimap.org/showbug.cgi?id=3423
Relevant upstream patch: [3] http://git.cyrusimap.org/cyrus-imapd/patch/?id=523a91a5e86c8b9a27a138f04a3e3f2d8786f162
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-705288?
The severity of REDHAT-BUG-705288 has been classified as high due to the potential for remote command injection during TLS protocol initialization.
How do I fix REDHAT-BUG-705288?
To fix REDHAT-BUG-705288, it is recommended to update your Cyrus IMAP server to the latest available version that addresses this vulnerability.
What versions of Cyrus IMAP are affected by REDHAT-BUG-705288?
REHAT-BUG-705288 affects multiple versions of Cyrus IMAP that do not implement proper validation during TLS protocol initialization.
Can REDHAT-BUG-705288 be exploited remotely?
Yes, REDHAT-BUG-705288 can be exploited remotely by an attacker during the plaintext to TLS session switch.
What are the potential consequences of REDHAT-BUG-705288?
The potential consequences of REDHAT-BUG-705288 include unauthorized command execution and compromise of secure communications.