CVE-2011-3208: Cmu Cyrus Imap Server

High severity, CVSS 7.5. EPSS: 5.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the split_wildmats function in nntpd.c in nntpd in Cyrus IMAP Server before 2.3.17 and 2.4.x before 2.4.11 allows remote attackers to execute arbitrary code via a crafted NNTP command.

Affected products

• Cmu Cyrus Imap Server: up to and including 2.3.16; version 2.0.17 only; version 2.1.16 only; version 2.1.17 only; version 2.1.18 only; version 2.2.8 only; …

Published 2011-09-14. Last modified 2026-06-16.