CVE-2004-1067 | BDVDB-2026-7491 Detail

Description#

Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/18333
http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
http://www.securityfocus.com/bid/11738
https://www.ubuntu.com/usn/usn-37-1/

Exploit#

No public exploit known

History#

Version 12004-12-10Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.