CVE-2002-1580

CVE-2002-1580 describes an integer overflow vulnerability in the imapparse.c component of Cyrus IMAP server versions 1.4 and 2.1.10. This flaw allows remote, unauthenticated attackers to execute arbitrary code by supplying a large length value, leading to a buffer overflow. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit for heap corruption in various Cyrus IMAPD versions, including those affected, is available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.