CVE-2011-3372

N/A Unknown
Published: December 24, 2011 Modified: April 29, 2026
View on NVD

Description

imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://cyrusimap.org/mediawiki/index.php/Latest_Updates
Source: secalert@redhat.com
http://git.cyrusimap.org/cyrus-imapd/commit/?id=77903669e04c9788460561dd0560b9c916519594
Source: secalert@redhat.com
http://secunia.com/advisories/46093
Source: secalert@redhat.com
Vendor Advisory
http://secunia.com/secunia_research/2011-68
Source: secalert@redhat.com
Vendor Advisory
http://securitytracker.com/id?1026363
Source: secalert@redhat.com
http://www.debian.org/security/2011/dsa-2318
Source: secalert@redhat.com
http://www.mandriva.com/security/advisories?name=MDVSA-2011:149
Source: secalert@redhat.com
http://www.redhat.com/support/errata/RHSA-2011-1508.html
Source: secalert@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=740822
Source: secalert@redhat.com
http://cyrusimap.org/mediawiki/index.php/Latest_Updates
Source: af854a3a-2127-422b-91ae-364da2661108
http://git.cyrusimap.org/cyrus-imapd/commit/?id=77903669e04c9788460561dd0560b9c916519594
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/46093
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/secunia_research/2011-68
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://securitytracker.com/id?1026363
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2011/dsa-2318
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.mandriva.com/security/advisories?name=MDVSA-2011:149
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2011-1508.html
Source: af854a3a-2127-422b-91ae-364da2661108
https://bugzilla.redhat.com/show_bug.cgi?id=740822
Source: af854a3a-2127-422b-91ae-364da2661108

18 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
3.4%
87th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-287

Affected Vendors

cyrus

Related CVEs

CVE-2026-9677 N/A
CVE-2026-13245 6.1
CVE-2026-12404 5.3
CVE-2026-10820 N/A
CVE-2026-12415 9.8