CVE

Id
9441  
CVE No.
CVE-2004-1013  
Status
Candidate  
Description
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.  
Phase
Assigned (20041104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63284 9441 CVE-2004-1013 BUGTRAQ:20041122 Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities  View
63285 9441 CVE-2004-1013 URL:http://marc.info/?l=bugtraq&m=110123023521619&w=2  View
63286 9441 CVE-2004-1013 MISC:http://security.e-matters.de/advisories/152004.html  View
63287 9441 CVE-2004-1013 MLIST:[cyrus-announce] 20041122 Cyrus IMAPd 2.2.9 Released  View
63288 9441 CVE-2004-1013 URL:http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143  View
63289 9441 CVE-2004-1013 CONFIRM:http://asg.web.cmu.edu/cyrus/download/imapd/changes.html  View
63290 9441 CVE-2004-1013 DEBIAN:DSA-597  View
63291 9441 CVE-2004-1013 URL:http://www.debian.org/security/2004/dsa-597  View
63292 9441 CVE-2004-1013 GENTOO:GLSA-200411-34  View
63293 9441 CVE-2004-1013 URL:http://security.gentoo.org/glsa/glsa-200411-34.xml  View
63294 9441 CVE-2004-1013 MANDRAKE:MDKSA-2004:139  View
63295 9441 CVE-2004-1013 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:139  View
63296 9441 CVE-2004-1013 UBUNTU:USN-31-1  View
63297 9441 CVE-2004-1013 URL:https://www.ubuntu.com/usn/usn-31-1/  View
63298 9441 CVE-2004-1013 SECUNIA:13274  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63172 JVNDB-2004-000514 nfs-utils の rpc.statd におけるサービス運用妨害 (DoS) の脆弱性 Nfs-utils に含まれる rpc.statd には、SIGPIPE シグナルを適切に無視せずにそのまま受信してしまうため、rpc.statd がクラッシュする脆弱性が存在します。 CVE-2004-1014 9441 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000514.html  View