Search/CVE-2006-2502
● CVE

CVE-2006-2502

VendorcyrusProductimapdDiscoveredMay 22, 2006UpdatedApr 16, 2026

Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command.

View graph Watch Export
CVSS v3.1
—
EPSS
53.3%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
1 relationships
Timeline
disclosure → media coverage
May 22, 2006
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026