NVD

Id
71413  
Name
CVE-2004-1012  
Description
The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1012  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369202 71413 CVE-2004-1012 [cyrus-announce] 20041122 Cyrus IMAPd 2.2.9 Released  View
369203 71413 CVE-2004-1012 http://asg.web.cmu.edu/cyrus/download/imapd/changes.html  View
369204 71413 CVE-2004-1012 20041122 Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities  View
369205 71413 CVE-2004-1012 http://security.e-matters.de/advisories/152004.html  View
369206 71413 CVE-2004-1012 GLSA-200411-34  View
369207 71413 CVE-2004-1012 DSA-597  View
369208 71413 CVE-2004-1012 MDKSA-2004:139  View
369209 71413 CVE-2004-1012 cyrus-imap-commands-execute-code(18199)  View
369210 71413 CVE-2004-1012 USN-31-1  View

Related JVN