Vulnerability in Carnegie_mellon_university Cyrus_imap_server

CVE-2004-1015

Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.

EPSS: 0.052 (91.4th percentile) — read the EPSS interpretation.

Affected products

Carnegie_mellon_university Cyrus_imap_server — versions 1.4, 1.5.19, 2.0.12
Redhat Fedora_core — versions core_2.0, core_3.0
Ubuntu Ubuntu_linux — versions 4.1
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (vendor-advisory, Patch, x_refsource_GENTOO, Vendor Advisory)