CVE-2004-1012 in Cyrus IMAP Serverinfo

Zusammenfassung (Englisch)

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Zuständig

Reservieren

04.11.2004

Veröffentlichung

10.01.2005

Einträge

VDB-23660

CPE

bereit

Exploit

Download

CVSS

10.0

EPSS

0.10245

Aktivitäten

Very Low

Quellen

Do you know our Splunk app?

Download it now for free!