CVE-2004-1067
Published: 10 January 2005
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.
Priority
Status
| Package | Release | Status |
|---|---|---|
|
cyrus21-imapd Launchpad, Ubuntu, Debian |
dapper |
Released
(2.1.18-2ubuntu2)
|
| edgy |
Released
(2.1.18-2ubuntu2)
|
|
| feisty |
Released
(2.1.18-2ubuntu2)
|
|
| upstream |
Needs triage
|