| Package | Affected versions | Patched versions |
|---|---|---|
| imap | ≥ 2.5.0, ≤ 2.5.12≥ 3.0.0, ≤ 3.0.9 |
The CalDAV feature in httpd in Cyrus IMAP 2.5.x through 2.5.12 and 3.0.x through 3.0.9 allows remote attackers to execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free