CVE-2001-1154: Bsdi Bsd OS

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Cyrus 2.0.15, 2.0.16, and 1.6.24 on BSDi 4.2, with IMAP enabled, allows remote attackers to cause a denial of service (hang) using PHP IMAP clients.

Affected products

• Bsdi Bsd OS: version 4.2 only
• Carnegie Mellon University Cyrus Imap Server: version 1.6.24 only; version 2.0.15 only; version 2.0.16 only

Published 2001-08-30. Last modified 2026-06-16.