CVE-2004-1015

4 documents4 sources
Severity
10.0CRITICAL
EPSS
5.7%
top 9.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Carnegie Mellon University Cyrus Imap ServerRedhat Fedora CoreUbuntu Ubuntu Linux
Timeline
PublishedJan 10
Latest updateApr 29

Description

Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDredhat/fedora_corecore_2.0, core_3.0+1

Also affects: Ubuntu Linux 4.1

Patches

Patch: security.gentoo.org ↗Patch: security.gentoo.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-w423-76hx-v38v: Buffer overflow in proxyd for Cyrus IMAP Server 2↗2022-04-29
▶
CVEList
CVE-2004-1015: Buffer overflow in proxyd for Cyrus IMAP Server 2↗2004-12-01
▶

📋Vendor Advisories

1
Debian
CVE-2004-1015: cyrus-imapd - Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imap...↗2004
▶
CVE-2004-1015 (CRITICAL CVSS 10) | Buffer overflow in proxyd for Cyrus | cvebase.io