Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Cyrus_imap_server | Carnegie_mellon_university | 2.2.6 | 2.2.6 |
Cyrus_imap_server | Carnegie_mellon_university | 2.1.10 | 2.1.10 |
Linux | Conectiva | 9.0 | 9.0 |
Cyrus_imap_server | Carnegie_mellon_university | 2.2.8 | 2.2.8 |
Cyrus_imap_server | Carnegie_mellon_university | 2.2.0_alpha | 2.2.0_alpha |
Cyrus_imap_server | Carnegie_mellon_university | 2.1.9 | 2.1.9 |
Cyrus_imap_server | Carnegie_mellon_university | 2.2.5 | 2.2.5 |
Cyrus_imap_server | Carnegie_mellon_university | 2.2.2_beta | 2.2.2_beta |
Openpkg | Openpkg | current | current |
Cyrus_imap_server | Carnegie_mellon_university | 2.1.16 | 2.1.16 |
Cyrus_imap_server | Carnegie_mellon_university | 2.2.7 | 2.2.7 |
Cyrus_imap_server | Carnegie_mellon_university | 2.2.3 | 2.2.3 |
Linux | Conectiva | 10.0 | 10.0 |
Cyrus_imap_server | Carnegie_mellon_university | 2.2.1_beta | 2.2.1_beta |
Cyrus_imap_server | Carnegie_mellon_university | 2.1.7 | 2.1.7 |
Cyrus_imap_server | Carnegie_mellon_university | 2.2.4 | 2.2.4 |