CVE:CVE-2019-18928
CNNVD:CNNVD-201911-1020
Cyrus IMAP是一款基于Unix和Linux操作系统，用于支持IMAP（Interactive Mail Access Protocol）协议的开源邮件服务器。
Cyrus IMAP 2.5.14之前的2.5.x版本和3.0.12之前的3.x版本中存在安全漏洞。攻击者可通过拦截HTTP请求利用该漏洞提升权限。
solution:Upgrade cyrus imap to a higher version than 2.5.14,3.0.12,and avoid the version [2.5.0,2.5.14),[3.0.0,3.0.12); Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0