CVE-2011-1926

The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

• cmu cyrus imap server (<= 2.4.6) • cmu cyrus imap server 2.0.17 • cmu cyrus imap server 2.1.16 • cmu cyrus imap server 2.1.17 • cmu cyrus imap server 2.1.18 • cmu cyrus imap server 2.2.8 • cmu cyrus imap server 2.2.9 • cmu cyrus imap server 2.2.10 • cmu cyrus imap server 2.2.11 • cmu cyrus imap server 2.2.12 • cmu cyrus imap server 2.2.13 • cmu cyrus imap server 2.2.13p1 • cmu cyrus imap server 2.3.0 • cmu cyrus imap server 2.3.1 • cmu cyrus imap server 2.3.2 • cmu cyrus imap server 2.3.3 • cmu cyrus imap server 2.3.4 • cmu cyrus imap server 2.3.5 • cmu cyrus imap server 2.3.6 • cmu cyrus imap server 2.3.7 • cmu cyrus imap server 2.3.8 • cmu cyrus imap server 2.3.9 • cmu cyrus imap server 2.3.10 • cmu cyrus imap server 2.3.11 • cmu cyrus imap server 2.3.12 • cmu cyrus imap server 2.3.13 • cmu cyrus imap server 2.3.14 • cmu cyrus imap server 2.3.15 • cmu cyrus imap server 2.3.16 • cmu cyrus imap server 2.4.0 • cmu cyrus imap server 2.4.1 • cmu cyrus imap server 2.4.2 • cmu cyrus imap server 2.4.3 • cmu cyrus imap server 2.4.4 • cmu cyrus imap server 2.4.5