CVE-2004-1012 in Cyrus IMAP Serverinfo

Summary

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

11/04/2004

Disclosure

01/10/2005

Entries

1

CPE

ready

Exploit

Download

CVSS

10.0

EPSS

0.10245

CTI

0.00

Sources

Do you know our Splunk app?

Download it now for free!