BSD PortsVulnerable: version 2.5.17_6 is affected by 2 known vulnerabilities. See below.
mail/cyrus-imapd25 2.5.17_6 DragonFly
Cyrus mail server, supporting POP3 and IMAP4 protocols
- System
- DragonFly
- Repository
- DPorts
- Maintainer
- [email protected] (as in FreeBSD)
- License
- BSD4CLAUSE
- Categories
- Package size
- 1193.2 KiB, 5486.8 KiB installed
Description
The Cyrus IMAP (Internet Message Access Protocol) server provides access to personal mail and system-wide bulletin boards through the IMAP protocol. The Cyrus IMAP server is a scaleable enterprise mail system designed for use from small to large enterprise environments using standards-based technologies.
A full Cyrus IMAP implementation allows a seamless mail and bulletin board environment to be set up across multiple servers. It differs from other IMAP server implementations in that it is run on "sealed" servers, where users are not normally permitted to log in. The mailbox database is stored in parts of the filesystem that are private to the Cyrus IMAP system. All user access to mail is through software using the IMAP, POP3, or KPOP protocols.
The private mailbox database design gives the server large advantages in efficiency, scalability, and administratability. Multiple concurrent read/write connections to the same mailbox are permitted. The server supports access control lists on mailboxes and storage quotas on mailbox hierarchies.
In the other systems
The newest version among them is 2.5.17, as upstream numbers it.
| System | Port | Version | Vulnerabilities | Status | Maintainer | Last update |
|---|---|---|---|---|---|---|
| DragonFly | mail/cyrus-imapd25 | 2.5.17_6 newest | 2 known | - | [email protected] | - |
| FreeBSD | mail/cyrus-imapd25 | 2.5.17_7 newest | 2 known | - | [email protected] | - |
| HardenedBSD | mail/cyrus-imapd25 | 2.5.17_7 newest | no data | - | [email protected] | - |
| GhostBSD | mail/cyrus-imapd25 | 2.5.17_7 newest | no data | - | [email protected] | - |
Install
Binary package:
pkg install cyrus-imapd25From DPorts:
cd /usr/dports/mail/cyrus-imapd25 && make install cleanDependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Run dependencies 4
Required by 1
Configuration
No options to configure.
- Service scripts
- none
Message after installing
To setup mail spool, modify /usr/local/etc/imapd.conf appropriately, then run /usr/local/cyrus/bin/mkimap. To run Cyrus IMAPd from startup, add cyrus_imapd_enable="YES" in your /etc/rc.conf.
Known vulnerabilities 2
- — cyrus-imapd -- unbounded memory allocation
- — cyrus-imapd -- multiple-minute daemon hang via input that is mishandled during hash-table interaction
1 DragonFly ports depend on it, directly or through others, and may carry the vulnerable code. The ports that need it