Executive Summary

Informations
Name CVE-2004-1067 First vendor Publication 2005-01-10
Vendor Cve Last vendor Modification 2024-11-20

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 10 Attack Range Network
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1067

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 18
Os 2
Os 2

Open Source Vulnerability Database (OSVDB)

Id Description
12348 Cyrus IMAP Server mysasl_canon_user() Function Remote Overflow

Nessus® Vulnerability Scanner

Date Description
2006-01-15 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-37-1.nasl - Type : ACT_GATHER_INFO
2005-03-21 Name : The remote host is missing a Mac OS X update that fixes a security issue.
File : macosx_SecUpd2005-003.nasl - Type : ACT_GATHER_INFO
2004-11-23 Name : The remote IMAP server has multiple buffer overflow vulnerabilities.
File : cyrus_imap_multiple_overflow.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
http://www.securityfocus.com/bid/11738
https://exchange.xforce.ibmcloud.com/vulnerabilities/18333
https://www.ubuntu.com/usn/usn-37-1/
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
Date Informations
2024-11-28 23:22:35
  • Multiple Updates
2024-11-28 12:06:16
  • Multiple Updates
2021-05-04 12:02:27
  • Multiple Updates
2021-04-22 01:02:37
  • Multiple Updates
2020-05-23 00:15:56
  • Multiple Updates
2017-07-11 12:01:33
  • Multiple Updates
2016-12-08 09:23:21
  • Multiple Updates
2016-10-18 12:01:24
  • Multiple Updates
2014-02-17 10:28:22
  • Multiple Updates
2013-05-11 11:43:45
  • Multiple Updates