Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2004-1012HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1012
2005-01-1005:00:00
Debian Security Bug Tracker
security-tracker.debian.org
11
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.085 Low
EPSS
Percentile
94.5%
The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command (“body[p”) that is treated as a different command (“body.peek”) and causes an index increment error that leads to an out-of-bounds memory corruption.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | cyrus-imapd | < 1.5.19-20 | cyrus-imapd_1.5.19-20_all.deb |
| Debian | 11 | all | cyrus-imapd | < 1.5.19-20 | cyrus-imapd_1.5.19-20_all.deb |
| Debian | 10 | all | cyrus-imapd | < 1.5.19-20 | cyrus-imapd_1.5.19-20_all.deb |
| Debian | 999 | all | cyrus-imapd | < 1.5.19-20 | cyrus-imapd_1.5.19-20_all.deb |
Related
openvas
openvas
FreeBSD Ports: cyrus-imapd
2008-09-04 00:00:00
FreeBSD Ports: cyrus-imapd
2008-09-04 00:00:00
Debian Security Advisory DSA 597-1 (cyrus-imapd)
2008-01-17 00:00:00
ubuntucve
ubuntucve
CVE-2004-1012
2005-01-10 00:00:00
cvelist
cvelist
CVE-2004-1012
2004-12-01 05:00:00
freebsd
freebsd
Cyrus IMAPd -- PARTIAL command out of bounds memory corruption
2004-11-06 00:00:00
nvd
nvd
CVE-2004-1012
2005-01-10 05:00:00
nessus
nessus
FreeBSD : Cyrus IMAPd -- PARTIAL command out of bounds memory corruption (114d70f3-3d16-11d9-8818-008088034841)
2005-07-13 00:00:00
Debian DSA-597-1 : cyrus-imapd - buffer overflow
2004-11-25 00:00:00
Ubuntu 4.10 : cyrus21-imapd vulnerabilities (USN-31-1)
2006-01-15 00:00:00
cve
cve
CVE-2004-1012
2005-01-10 05:00:00
debian
debian
[SECURITY] [DSA 597-1] New cyrus-imapd packages fix arbitrary code execution
2004-11-25 00:00:00
[SECURITY] [DSA 597-1] New cyrus-imapd packages fix arbitrary code execution
2004-11-25 09:34:48
ubuntu
ubuntu
cyrus21-imapd vulnerabilities
2004-11-24 00:00:00
osv
osv
cyrus-imapd - buffer overflow
2004-11-25 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package cyrus-imapd version 2.2.9-alt1
2004-11-23 00:00:00
suse
suse
remote command execution in cyrus-imapd
2004-12-03 13:37:30
securityvulns
securityvulns
Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities
2004-11-24 00:00:00
gentoo
gentoo
Cyrus IMAP Server: Multiple remote vulnerabilities
2004-11-25 00:00:00
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.085 Low
EPSS
Percentile
94.5%
Related for DEBIANCVE:CVE-2004-1012