10

CVE-2004-1012

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openpkg ≫ Openpkg Versioncurrent
Conectiva ≫ Linux Version9.0
Conectiva ≫ Linux Version10.0
Redhat ≫ Fedora Core Versioncore_2.0
Redhat ≫ Fedora Core Versioncore_3.0
Trustix ≫ Secure Linux Version2.0
Trustix ≫ Secure Linux Version2.1
Trustix ≫ Secure Linux Version2.2
Ubuntu ≫ Ubuntu Linux Version4.1 Editionia64
Ubuntu ≫ Ubuntu Linux Version4.1 Editionppc
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.95% 0.923
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143
http://marc.info/?l=bugtraq&m=110123023521619&w=2
http://secunia.com/advisories/13274/
http://security.e-matters.de/advisories/152004.html
http://security.gentoo.org/glsa/glsa-200411-34.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2004:139
http://www.debian.org/security/2004/dsa-597
https://exchange.xforce.ibmcloud.com/vulnerabilities/18199
https://www.ubuntu.com/usn/usn-31-1/