CVE

Id
9495  
CVE No.
CVE-2004-1067  
Status
Candidate  
Description
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.  
Phase
Assigned (20041129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
63964 9495 CVE-2004-1067 CONFIRM:http://asg.web.cmu.edu/cyrus/download/imapd/changes.html  View
63965 9495 CVE-2004-1067 UBUNTU:USN-37-1  View
63966 9495 CVE-2004-1067 URL:https://www.ubuntu.com/usn/usn-37-1/  View
63967 9495 CVE-2004-1067 BID:11738  View
63968 9495 CVE-2004-1067 URL:http://www.securityfocus.com/bid/11738  View
63969 9495 CVE-2004-1067 XF:cyrus-mysaslcanonuser-offbyone-bo(18333)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63154 JVNDB-2004-000496 Linux Kernel の unix_dgram_recvmsg() 関数における権限昇格の脆弱性 Linux Kernel に実装されている AF_UNIX ソケットによるプロセス間通信では、af_unix.c 内の unix_dgram_recvmsg() 関数において取り扱うデータグラムのシリアライズに不備が存在し、競合状態が発生する脆弱性が存在します。 CVE-2004-1068 9495 6.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000496.html  View