critical10.0
CVE-2004-1067
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execu…
Impact
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Carnegie Mellon University | Cyrus Imap Server | Versions 1.4, 1.5.19, 2.0.12, 2.0.16, 2.1.7, 2.1.9 |
| Redhat | Fedora Core | Versions core_2.0, core_3.0 |
| Ubuntu | Ubuntu Linux | Version 4.1 |
References
- NVD record
- CVE.org record
- http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
- http://www.securityfocus.com/bid/11738
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18333
- https://www.ubuntu.com/usn/usn-37-1/
- http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
- http://www.securityfocus.com/bid/11738
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18333
- https://www.ubuntu.com/usn/usn-37-1/