critical10.0
CVE-2004-1015
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code,…
Impact
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Carnegie Mellon University | Cyrus Imap Server | Versions 1.4, 1.5.19, 2.0.12, 2.0.16, 2.1.7, 2.1.9 |
| Redhat | Fedora Core | Versions core_2.0, core_3.0 |
| Ubuntu | Ubuntu Linux | Version 4.1 |
References
- NVD record
- CVE.org record
- http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=145
- http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
- http://security.gentoo.org/glsa/glsa-200411-34.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:139
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18274
- http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=145
- http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
- http://security.gentoo.org/glsa/glsa-200411-34.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:139
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18274