CVE-2004-1067

Published: Jan 10, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.

Affected (22)

Products: Carnegie Mellon University: Cyrus Imap Server · Redhat: Fedora Core · Ubuntu: Ubuntu Linux

Carnegie Mellon University

1 product

1 product

1 product

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Carnegie Mellon University Cyrus Imap Server	Version 1.4
Carnegie Mellon University Cyrus Imap Server	Version 1.5.19
Carnegie Mellon University Cyrus Imap Server	Version 2.0.12
Carnegie Mellon University Cyrus Imap Server	Version 2.0.16
Carnegie Mellon University Cyrus Imap Server	Version 2.1.10
Carnegie Mellon University Cyrus Imap Server	Version 2.1.16
Carnegie Mellon University Cyrus Imap Server	Version 2.1.7
Carnegie Mellon University Cyrus Imap Server	Version 2.1.9
Carnegie Mellon University Cyrus Imap Server	Version 2.2.0_alpha
Carnegie Mellon University Cyrus Imap Server	Version 2.2.1_beta
Carnegie Mellon University Cyrus Imap Server	Version 2.2.2_beta
Carnegie Mellon University Cyrus Imap Server	Version 2.2.3
Carnegie Mellon University Cyrus Imap Server	Version 2.2.4
Carnegie Mellon University Cyrus Imap Server	Version 2.2.5
Carnegie Mellon University Cyrus Imap Server	Version 2.2.6
Carnegie Mellon University Cyrus Imap Server	Version 2.2.7
Carnegie Mellon University Cyrus Imap Server	Version 2.2.8
Carnegie Mellon University Cyrus Imap Server	Version 2.2.9