Unscored severity · published Jan 10, 2005
CVE-2004-1013
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1)…
–
CVSS
5.8%
EPSS
No
On KEV
Description
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Cyrus Imap Server · Carnegie Mellon University
2.1.7; 2.1.9; 2.1.10; 2.1.16; 2.2.0_alpha; 2.2.1_beta; +7 more · source: NVD
FC
Fedora Core · Redhat
core_2.0; core_3.0 · source: NVD
LI
Linux · Conectiva
9.0; 10.0 · source: NVD
OP
Openpkg · Openpkg
current · source: NVD
SL
Secure Linux · Trustix
2.0; 2.1; 2.2 · source: NVD
UL
Ubuntu Linux · Ubuntu
4.1; 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1013
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1013
asg.web.cmu.edu
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143
asg.web.cmu.edu
http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
marc.info
http://marc.info/?l=bugtraq&m=110123023521619&w=2
secunia.com
http://secunia.com/advisories/13274/
security.e-matters.de
http://security.e-matters.de/advisories/152004.html
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200411-34.xml
More from Cyrus Imap Server
–
CVE-2004-1012
The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that…
–
CVE-2004-1015
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different…
–
CVE-2004-1067
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code…
–
CVE-2004-1011
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY…
–
CVE-2002-1580
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow…