Upstream information
Description
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having critical severity.
| National Vulnerability Database | |
|---|---|
| Base Score | 10 |
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Access Vector | Network |
| Access Complexity | Low |
| Authentication | None |
| Confidentiality Impact | Complete |
| Integrity Impact | Complete |
| Availability Impact | Complete |
SUSE Security Advisories:
- SUSE-SA:2004:043, published Friday, Dec 3rd 2004 13:00 MEST
- SUSE-SR:2004:003, published Tuesday, Dec 7th 2004 15:00 MEST
SUSE Timeline for this CVE
CVE page created: Fri Jun 28 01:02:12 2013CVE page last modified: Fri Dec 8 16:10:31 2023