STARTTLS implementation allows MITM

[Dave Walker]

The STARTTLS implementation in Cyrus IMAP Server before 2.4.7 does not
properly restrict I/O buffering, which allows man-in-the-middle attackers
to insert commands into encrypted sessions by sending a cleartext command
that is processed after TLS is in place, related to a "plaintext command
injection" attack, a similar issue to CVE-2011-0411.

http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-1926

[Colin Watson (cjwatson)]

cyrus-imapd-2.2 (2.2.13p1-11) unstable; urgency=low

  * Fix CVE-2011-1926: STARTTLS plaintext command injection
    vulnerability (VU#555316)
  * Fix infinite loop in case of corrupted index files (Closes: #627078)

 -- Ondřej Surý <email address hidden> Wed, 18 May 2011 10:43:58 +0200

... synced into precise with 2.2.13p1-15; although I might shortly remove this in favour of cyrus-imapd-2.4.

[Jamie Strandboge (jdstrand)]

Thank you for reporting this bug and helping to make Ubuntu better. The package referred to in this bug is in universe or multiverse and reported against a release of Ubuntu (hardy) which no longer receives updates outside of the explicitly supported LTS packages. While the bug against hardy is being marked "Won't Fix" for now, if you are interested feel free to post a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures'

Please feel free to report any other bugs you may find.

[Jamie Strandboge (jdstrand)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

[Jamie Strandboge (jdstrand)]

Thank you for reporting this bug to Ubuntu. natty has reached EOL
(End of Life) and is no longer supported. As a result, this bug
against natty is being marked "Won't Fix". Please see
https://wiki.ubuntu.com/Releases for currently supported Ubuntu
releases.

Please feel free to report any other bugs you may find.

[dino99 (9d9)]

eol reached https://wiki.ubuntu.com/Releases