Lucene search

K
ubuntucveUbuntu.comUB:CVE-2004-1067
HistoryJan 10, 2005 - 12:00 a.m.

CVE-2004-1067

2005-01-1000:00:00
ubuntu.com
ubuntu.com
5

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.035 Low

EPSS

Percentile

91.5%

Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server
2.2.9 and earlier leads to a buffer overflow, which may allow remote
attackers to execute arbitrary code via the username.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchcyrus21-imapd< 2.1.18-2ubuntu2UNKNOWN
ubuntu6.10noarchcyrus21-imapd< 2.1.18-2ubuntu2UNKNOWN
ubuntu7.04noarchcyrus21-imapd< 2.1.18-2ubuntu2UNKNOWN

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.035 Low

EPSS

Percentile

91.5%

Related for UB:CVE-2004-1067