*** This bug is a security vulnerability ***

Public security bug reported:

The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not
properly restrict I/O buffering, which allows man-in-the-middle attackers
to insert commands into encrypted sessions by sending a cleartext command
that is processed after TLS is in place, related to a "plaintext command
injection" attack, a similar issue to CVE-2011-0411.

http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-1926

** Affects: cyrus-imapd-2.2 (Ubuntu)
     Importance: High
         Status: Confirmed

** Affects: cyrus-imapd-2.4 (Ubuntu)
     Importance: High
         Status: Invalid

** Affects: cyrus-imapd-2.2 (Ubuntu Lucid)
     Importance: High
         Status: Fix Released

** Affects: cyrus-imapd-2.4 (Ubuntu Lucid)
     Importance: High
         Status: Fix Released

** Affects: cyrus-imapd-2.2 (Ubuntu Maverick)
     Importance: High
         Status: Fix Released

** Affects: cyrus-imapd-2.4 (Ubuntu Maverick)
     Importance: High
         Status: Fix Released

** Affects: cyrus-imapd-2.2 (Ubuntu Natty)
     Importance: High
         Status: Confirmed

** Affects: cyrus-imapd-2.4 (Ubuntu Natty)
     Importance: High
         Status: Fix Released

** Affects: cyrus-imapd-2.2 (Ubuntu Oneiric)
     Importance: High
         Status: Confirmed

** Affects: cyrus-imapd-2.4 (Ubuntu Oneiric)
     Importance: High
         Status: Invalid

** Affects: cyrus-imapd-2.2 (Ubuntu Precise)
     Importance: High
         Status: Confirmed

** Affects: cyrus-imapd-2.4 (Ubuntu Precise)
     Importance: High
         Status: Invalid

** Affects: cyrus-imapd-2.2 (Ubuntu Hardy)
     Importance: High
         Status: Confirmed

** Affects: cyrus-imapd-2.4 (Ubuntu Hardy)
     Importance: High
         Status: Fix Released

** Visibility changed to: Public

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-1926

** Also affects: cyrus-imapd-2.4 (Ubuntu)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.2 (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.4 (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.2 (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.4 (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.2 (Ubuntu Oneiric)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.4 (Ubuntu Oneiric)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.2 (Ubuntu Hardy)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.4 (Ubuntu Hardy)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.2 (Ubuntu Natty)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.4 (Ubuntu Natty)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.2 (Ubuntu Maverick)
   Importance: Undecided
       Status: New

** Also affects: cyrus-imapd-2.4 (Ubuntu Maverick)
   Importance: Undecided
       Status: New

** Changed in: cyrus-imapd-2.2 (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.2 (Ubuntu Lucid)
       Status: New => Fix Released

** Changed in: cyrus-imapd-2.2 (Ubuntu Maverick)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.2 (Ubuntu Maverick)
       Status: New => Fix Released

** Changed in: cyrus-imapd-2.2 (Ubuntu Hardy)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.2 (Ubuntu Hardy)
       Status: New => Confirmed

** Changed in: cyrus-imapd-2.2 (Ubuntu Natty)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.2 (Ubuntu Natty)
       Status: New => Confirmed

** Changed in: cyrus-imapd-2.2 (Ubuntu Oneiric)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.2 (Ubuntu Oneiric)
       Status: New => Confirmed

** Changed in: cyrus-imapd-2.2 (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.2 (Ubuntu Precise)
       Status: New => Confirmed

** Changed in: cyrus-imapd-2.4 (Ubuntu Oneiric)
       Status: New => Invalid

** Changed in: cyrus-imapd-2.4 (Ubuntu Oneiric)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.4 (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.4 (Ubuntu Precise)
       Status: New => Invalid

** Changed in: cyrus-imapd-2.4 (Ubuntu Natty)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.4 (Ubuntu Natty)
       Status: New => Fix Released

** Changed in: cyrus-imapd-2.4 (Ubuntu Maverick)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.4 (Ubuntu Maverick)
       Status: New => Fix Released

** Changed in: cyrus-imapd-2.4 (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.4 (Ubuntu Lucid)
       Status: New => Fix Released

** Changed in: cyrus-imapd-2.4 (Ubuntu Hardy)
   Importance: Undecided => High

** Changed in: cyrus-imapd-2.4 (Ubuntu Hardy)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/880924

Title:
  STARTTLS implementation allows MITM

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/cyrus-imapd-2.2/+bug/880924/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to