CVE-2004-1013 The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p",...
HighCVSS 10.0
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| carnegie mellon university cyrus imap server | = 2.1.7 | No fix listed |
| carnegie mellon university cyrus imap server | = 2.1.9 | No fix listed |
| carnegie mellon university cyrus imap server | = 2.1.10 | No fix listed |
| carnegie mellon university cyrus imap server | = 2.1.16 | No fix listed |
| carnegie mellon university cyrus imap server | = 2.2.0_alpha | No fix listed |
| carnegie mellon university cyrus imap server | = 2.2.1_beta | No fix listed |
| carnegie mellon university cyrus imap server | = 2.2.2_beta | No fix listed |
| carnegie mellon university cyrus imap server | = 2.2.3 | No fix listed |
| carnegie mellon university cyrus imap server | = 2.2.4 | No fix listed |
| carnegie mellon university cyrus imap server | = 2.2.5 | No fix listed |
| carnegie mellon university cyrus imap server | = 2.2.6 | No fix listed |
| carnegie mellon university cyrus imap server | = 2.2.7 | No fix listed |
| carnegie mellon university cyrus imap server | = 2.2.8 | No fix listed |
| openpkg | = current | No fix listed |
| conectiva linux | = 9.0 | No fix listed |
| conectiva linux | = 10.0 | No fix listed |
| redhat fedora core | = core_2.0 | No fix listed |
| redhat fedora core | = core_3.0 | No fix listed |
| trustix secure linux | = 2.0 | No fix listed |
| trustix secure linux | = 2.1 | No fix listed |
| trustix secure linux | = 2.2 | No fix listed |
| ubuntu linux | = 4.1 | No fix listed |
| debian/cyrus-imapd(Debian:12) | < 1.5.19-20 | 1.5.19-20 |
| debian/cyrus-imapd(Debian:13) | < 1.5.19-20 | 1.5.19-20 |
| debian/cyrus-imapd(Debian:14) | < 1.5.19-20 | 1.5.19-20 |
References
- [cyrus-announce] 20041122 Cyrus IMAPd 2.2.9 Released mailing-list
- asg.web.cmu.edu
- 20041122 Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities mailing-list
- 13274 third-party-advisory
- security.e-matters.de
- GLSA-200411-34 vendor-advisory
- DSA-597 patch vendor-advisory
- MDKSA-2004:139 vendor-advisory
- USN-31-1 vendor-advisory
- Debian Security Tracker CVE-2004-1013 vendor-advisory