Cyrus 漏洞

时间轴

类型

Not Defined18
Software Library2

产品

Cyrus IMAP8
Cyrus SASL4
Cyrus IMAPd2
Cyrus SASL Library2
Cyrus IMSP Server2

修正

Official Fix14
Temporary Fix0
Workaround0
Unavailable2
Not Defined4

易受攻击性

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined18

访问向量

Not Defined0
Physical0
Local2
Adjacent2
Network16

身份验证

Not Defined0
High0
Low8
None12

用户交互

Not Defined0
Required0
None20

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤52
≤64
≤72
≤810
≤90
≤102

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤54
≤64
≤78
≤82
≤90
≤102

VulDB

≤10
≤20
≤30
≤40
≤52
≤66
≤72
≤88
≤90
≤102

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k2
<2k8
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k20
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (8): IMAP (9), IMAPD (1), IMAPd (2), IMSP Server (1), SASL (4), SASL Library (1), Sieve (1), libSieve (1)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2022-02-255.55.3Cyrus SASL UPDATE Statement sql.c 权限升级未知Not DefinedOfficial Fix0.002900.00CVE-2022-24407
2021-09-014.34.1Cyrus IMAP Daemon 拒绝服务未知Not DefinedOfficial Fix0.004500.00CVE-2021-33582
2021-05-106.36.0Cyrus IMAP Replication 权限升级未知Not DefinedOfficial Fix0.001130.00CVE-2021-32056
2019-12-166.46.2Cyrus IMAP Sieve Script Command lmtp_sieve.c autosieve_createfolder 权限升级未知Not DefinedOfficial Fix0.001150.03CVE-2019-19783
2019-11-158.58.4Cyrus IMAP 权限升级未知Not DefinedOfficial Fix0.002040.05CVE-2019-18928
2017-09-107.26.9Cyrus IMAP mboxlist.c mboxlist_do_find 权限升级未知Not DefinedOfficial Fix0.003540.00CVE-2017-14230
2017-08-225.95.8Cyrus IMAP Command 权限升级未知Not DefinedOfficial Fix0.001410.00CVE-2017-12843
2015-12-037.37.0Cyrus IMAP index.c index_urlfetch Remote Code Execution未知Not DefinedOfficial Fix0.013700.04CVE-2015-8078
2015-12-037.37.0Cyrus IMAP index.c index_urlfetch Remote Code Execution未知Not DefinedOfficial Fix0.014470.02CVE-2015-8077
2015-12-037.37.0Cyrus IMAP index.c index_urlfetch 内存损坏未知Not DefinedOfficial Fix0.017650.02CVE-2015-8076

9 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 9 results.

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!