CVE-2006-2502: Cyrus Imapd

Medium severity, CVSS 5.1. EPSS: 53.3% chance of exploitation in the next 30 days.

Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command.

Affected products

• Cyrus Imapd: version 2.3.2 only

Published 2006-05-22. Last modified 2026-06-16.