CVE-2011-3372 — cyrus-imapd: nntpd authentication bypass

Back Back to CVE browser

HIGH

cyrus-imapd: nntpd authentication bypass

Published Dec 24, 2011

7.5

HIGH

CVSS 2.0

EPSS 3.29%

Description

imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.

Affected products

Red Hat Enterprise Linux 4

cyrus-imapd-0:2.2.12-17.el4

Fixed · RHSA-2011:1508
Red Hat Enterprise Linux 5

cyrus-imapd-0:2.3.7-12.el5_7.2

Fixed · RHSA-2011:1508
Red Hat Enterprise Linux 6

cyrus-imapd-0:2.3.16-6.el6_1.4

Fixed · RHSA-2011:1508

Product	Package	State	Advisory
Red Hat Enterprise Linux 4	cyrus-imapd-0:2.2.12-17.el4	Fixed	RHSA-2011:1508
Red Hat Enterprise Linux 5	cyrus-imapd-0:2.3.7-12.el5_7.2	Fixed	RHSA-2011:1508
Red Hat Enterprise Linux 6	cyrus-imapd-0:2.3.16-6.el6_1.4	Fixed	RHSA-2011:1508

Remediation

No remediation recorded yet.

Metrics

3.29% 0.03289

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.03289

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	3.29% (0.03289)	88.07th	v5 (v2026.06.15)
Jun 15, 2026	3.36% (0.03364)	87.12th	v5 (v2026.06.15)
Mar 17, 2025	0.75% (0.00748)	71.38th	v4 (v2025.03.14)
Dec 12, 2024	1.78% (0.01784)	88.56th	v3 (v2023.03.01)
May 24, 2024	2.01% (0.02012)	88.86th	v3 (v2023.03.01)
May 10, 2024	1.70% (0.01697)	87.68th	v3 (v2023.03.01)
Apr 25, 2024	1.44% (0.01440)	86.41th	v3 (v2023.03.01)
Mar 15, 2024	1.37% (0.01373)	85.96th	v3 (v2023.03.01)
Feb 8, 2024	1.17% (0.01169)	84.52th	v3 (v2023.03.01)
Mar 7, 2023	1.78% (0.01784)	86.13th	v3 (v2023.03.01)
Mar 6, 2023	1.97% (0.01974)	78.97th	v2 (v2022.01.01)
Apr 1, 2022	1.97% (0.01974)	77.12th	v2 (v2022.01.01)
Feb 4, 2022	1.97% (0.01974)	56.20th	v2 (v2022.01.01)

Weaknesses (1)

CWE-287

Improper Authentication

References (12)

http://cyrusimap.org/mediawiki/index.php/Latest_Updates
x_refsource_CONFIRM
http://git.cyrusimap.org/cyrus-imapd/commit/?id=77903669e04c9788460561dd0560b9c916519594
x_refsource_CONFIRM
http://secunia.com/advisories/46093
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2011-68
x_refsource_MISCVendor Advisory
http://securitytracker.com/id?1026363
vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2011/dsa-2318
vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDVSA-2011:149
vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2011-1508.html
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2011-3372
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=740822
x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2011-3372
https://www.cve.org/CVERecord?id=CVE-2011-3372

Link	Providers	Tags
http://cyrusimap.org/mediawiki/index.php/Latest_Updates		x_refsource_CONFIRM
http://git.cyrusimap.org/cyrus-imapd/commit/?id=77903669e04c9788460561dd0560b9c916519594		x_refsource_CONFIRM
http://secunia.com/advisories/46093		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2011-68		x_refsource_MISCVendor Advisory
http://securitytracker.com/id?1026363		vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2011/dsa-2318		vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDVSA-2011:149		vendor-advisoryx_refsource_MANDRIVA
http://www.redhat.com/support/errata/RHSA-2011-1508.html		vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2011-3372		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=740822		x_refsource_CONFIRMIssue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2011-3372
https://www.cve.org/CVERecord?id=CVE-2011-3372