CVE-2002-1580: Carnegie Mellon University Cyrus Imap Server

High severity, CVSS 7.5. EPSS: 16.5% chance of exploitation in the next 30 days.

Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.

Affected products

• Carnegie Mellon University Cyrus Imap Server: version 1.4 only; version 1.5.19 only; version 2.0.12 only; version 2.0.16 only; version 2.1.9 only; version 2.1.10 only

Published 2004-06-14. Last modified 2026-06-16.