NetSight
IP …
high7.5Public exploit code

CVE-2004-0777

Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.

Affected products

VendorProductAffected versions
Inter7Courier-Imap
Versions 1.6, 1.7, 2.0.0, 2.1, 2.1.1, 2.1.2

Weakness classification

CWE-134

References