CVE

Id
9312  
CVE No.
CVE-2004-0884  
Status
Candidate  
Description
The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.  
Phase
Assigned (20040922)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
61714 9312 CVE-2004-0884 APPLE:APPLE-SA-2005-03-21  View
61715 9312 CVE-2004-0884 URL:http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html  View
61716 9312 CVE-2004-0884 DEBIAN:DSA-563  View
61717 9312 CVE-2004-0884 URL:http://www.debian.org/security/2004/dsa-563  View
61718 9312 CVE-2004-0884 DEBIAN:DSA-568  View
61719 9312 CVE-2004-0884 URL:http://www.debian.org/security/2004/dsa-568  View
61720 9312 CVE-2004-0884 FEDORA:FLSA:2137  View
61721 9312 CVE-2004-0884 URL:https://bugzilla.fedora.us/show_bug.cgi?id=2137  View
61722 9312 CVE-2004-0884 GENTOO:GLSA-200410-05  View
61723 9312 CVE-2004-0884 URL:http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml  View
61724 9312 CVE-2004-0884 MANDRAKE:MDKSA-2004:106  View
61725 9312 CVE-2004-0884 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:106  View
61726 9312 CVE-2004-0884 REDHAT:RHSA-2004:546  View
61727 9312 CVE-2004-0884 URL:http://rhn.redhat.com/errata/RHSA-2004-546.html  View
61728 9312 CVE-2004-0884 TRUSTIX:2004-0053  View
61729 9312 CVE-2004-0884 URL:http://www.trustix.net/errata/2004/0053/  View
61730 9312 CVE-2004-0884 BUGTRAQ:20050128 [OpenPKG-SA-2005.004] OpenPKG Security Advisory (sasl)  View
61731 9312 CVE-2004-0884 URL:http://marc.info/?l=bugtraq&m=110693126007214&w=2  View
61732 9312 CVE-2004-0884 CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=134657  View
61733 9312 CVE-2004-0884 CIAC:P-003  View
61734 9312 CVE-2004-0884 URL:http://www.ciac.org/ciac/bulletins/p-003.shtml  View
61735 9312 CVE-2004-0884 BID:11347  View
61736 9312 CVE-2004-0884 URL:http://www.securityfocus.com/bid/11347  View
61737 9312 CVE-2004-0884 OVAL:oval:org.mitre.oval:def:11678  View
61738 9312 CVE-2004-0884 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11678  View
61739 9312 CVE-2004-0884 XF:cyrus-sasl-saslpath(17643)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63080 JVNDB-2004-000422 Apache HTTP Server の mod_ssl における特定のリソースへのアクセスが可能な脆弱性 Apache HTTP Server の mod_ssl には、SSLCipherSuite ディレクティブを有効にして、特定のリソースに対して暗号スイートを限定しているにも関らず、バーチャルホストに対して許可している暗号スイートを使用することでネゴシエーション可能である脆弱性が存在します。 CVE-2004-0885 9312 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000422.html  View