CVE-2011-3372

CVE-2011-3372 describes an authentication bypass vulnerability in the NNTP server (nntpd) component of Cyrus IMAPd versions 2.4.x prior to 2.4.12. An attacker can gain unauthorized access by sending an AUTHINFO USER command without a subsequent AUTHINFO PASS command. This flaw carries a CVSS score of 7.5, indicating a high severity due to its network-based attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.