Vendor Dictionary: Carnegie Mellon University

Carnegie Mellon University

Short Name:	[None Entered]
Previous Names:	[None Entered]
URL:	[None Entered]
Email:	[None Entered]
Security URL:	[None Entered]
Security Email:	[None Entered]
Knowledge Base:	[None Entered]
Notes:	[No Notes]

Vulnerabilities by Vendor Product

Carnegie Mellon University

Carnegie Mellon University

snmp: 3.6; OSVDB ID: 22493 CMU SNMP snmptrapd snmp_input() Function Remote Format String; 3.7; OSVDB ID: 22493 CMU SNMP snmptrapd snmp_input() Function Remote Format String

ESP-PIX: Unspecified; OSVDB ID: 82806 ESP-PIX Tag / Word Replay CAPTCHA Bypass

Cyrus SASL: 2.1.16; OSVDB ID: 82238 Cyrus SASL Unspecified Overflow; 2.1.6; OSVDB ID: 82286 Cyrus SASL Digest String Verification Unspecified Issue; Unspecified; OSVDB ID: 82298 Cyrus SASL Password Zeroing Unspecified Issue; Unspecified; OSVDB ID: 82302 Cyrus SASL lib/checkpw.c saslautd_verify_password() Function Overflow; Unspecified; OSVDB ID: 82304 Cyrus SASL lib/server.c Crafted SASL Authentication Abort Remote DoS; Unspecified; OSVDB ID: 82312 Cyrus SASL plugins/sql.c Invalid User Search DoS

Cyrus IMAP Server: 2.4.0; OSVDB ID: 72186 Cyrus IMAP Server STARTTLS Arbitrary Plaintext Command Injection; 2.4.3; OSVDB ID: 72186 Cyrus IMAP Server STARTTLS Arbitrary Plaintext Command Injection; 2.4.5; OSVDB ID: 72186 Cyrus IMAP Server STARTTLS Arbitrary Plaintext Command Injection; 2.4.6; OSVDB ID: 72186 Cyrus IMAP Server STARTTLS Arbitrary Plaintext Command Injection; 2.4.8; OSVDB ID: 82119 Cyrus IMAP Server MIME Parsing Depth Unspecified Overflows; 2.1.13; OSVDB ID: 82188 Cyrus IMAP Server fud Daemon Unspecified DoS; 2.0.11; OSVDB ID: 82189 Cyrus IMAP Server timsieved Layers Unspecified Issue; 2.1.2; OSVDB ID: 82199 Cyrus IMAP Server cyrusdb_skiplist Iteration Lock Handling Unspecified DoS; Unspecified; OSVDB ID: 82200 Cyrus IMAP Server Crafted Address Form ACL Bypass Arbitrary Mailbox Delivery; 1.4; OSVDB ID: 82200 Cyrus IMAP Server Crafted Address Form ACL Bypass Arbitrary Mailbox Delivery

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.