View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2011-3372 medium priority: Ubuntu including 3 source packages (cyrus-imapd-2.2, cyrus-imapd-2.4, kolab-cyrus-imapd), 51 status rows across 17 suites (hardy, lucid, maverick, natty, oneiric, precise, quantal, raring, saucy, trusty, upstream, utopic, vivid, wily, xenial, yakkety, zesty): DNE 25, ignored 13, not-affected 8, released 3, needs-triage 2.
imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.