RHSA-2011:1317: Important: cyrus-imapd security update
The cyrus-imapd packages contain a high-performance mail server with IMAP,POP3, NNTP, and Sieve support.A buffer overflow flaw was found in the cyrus-imapd NNTP server, nntpd. Aremote user able to use the nntpd service could use this flaw to crash thenntpd child process or, possibly, execute arbitrary code with theprivileges of the cyrus user. (CVE-2011-3208)Red Hat would like to thank Greg Banks for reporting this issue.Users of cyrus-imapd are advised to upgrade to these updated packages,which contain a backported patch to correct this issue. After installingthe update, cyrus-imapd will be restarted automatically.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2011:1317?
The severity of RHSA-2011:1317 is classified as important.
How do I fix RHSA-2011:1317?
To fix RHSA-2011:1317, upgrade the cyrus-imapd packages to version 2.3.16-6.el6_1.3 or later.
What vulnerability does RHSA-2011:1317 address?
RHSA-2011:1317 addresses a buffer overflow flaw in the cyrus-imapd NNTP server, nntpd.
What are the affected packages in RHSA-2011:1317?
The affected packages in RHSA-2011:1317 include cyrus-imapd, cyrus-imapd-utils, and cyrus-imapd-devel, among others.
Can RHSA-2011:1317 lead to remote code execution?
Yes, the buffer overflow flaw in RHSA-2011:1317 can be exploited by a remote user to crash the nntpd child process.