Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

carnegie mellon university cyrus imap server 2.2.6 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2004-1067
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and previous versions leads to a buffer overflow, which may allow remote malicious users to execute arbitrary code via the username.
Carnegie Mellon University Cyrus Imap Server 2.1.10Carnegie Mellon University Cyrus Imap Server 2.1.16Carnegie Mellon University Cyrus Imap Server 2.2.4Carnegie Mellon University Cyrus Imap Server 2.2.5Carnegie Mellon University Cyrus Imap Server 1.4Carnegie Mellon University Cyrus Imap Server 1.5.19Carnegie Mellon University Cyrus Imap Server 2.2.0 AlphaCarnegie Mellon University Cyrus Imap Server 2.2.1 BetaCarnegie Mellon University Cyrus Imap Server 2.2.8Carnegie Mellon University Cyrus Imap Server 2.2.9Carnegie Mellon University Cyrus Imap Server 2.1.7Carnegie Mellon University Cyrus Imap Server 2.1.9Carnegie Mellon University Cyrus Imap Server 2.2.6Carnegie Mellon University Cyrus Imap Server 2.2.7Carnegie Mellon University Cyrus Imap Server 2.0.12Carnegie Mellon University Cyrus Imap Server 2.0.16Carnegie Mellon University Cyrus Imap Server 2.2.2 BetaCarnegie Mellon University Cyrus Imap Server 2.2.3Ubuntu Ubuntu Linux 4.1Redhat Fedora Core Core 2.0Redhat Fedora Core Core 3.0
10
CVSSv2
CVE-2004-1015
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and previous versions, with the imapmagicplus option enabled, may allow remote malicious users to execute arbitrary code, a different vulnerability than CVE-2004-1011.
Carnegie Mellon University Cyrus Imap Server 1.4Carnegie Mellon University Cyrus Imap Server 1.5.19Carnegie Mellon University Cyrus Imap Server 2.2.1 BetaCarnegie Mellon University Cyrus Imap Server 2.2.2 BetaCarnegie Mellon University Cyrus Imap Server 2.2.9Carnegie Mellon University Cyrus Imap Server 2.1.9Carnegie Mellon University Cyrus Imap Server 2.2.0 AlphaCarnegie Mellon University Cyrus Imap Server 2.2.7Carnegie Mellon University Cyrus Imap Server 2.1.16Carnegie Mellon University Cyrus Imap Server 2.1.7Carnegie Mellon University Cyrus Imap Server 2.2.5Carnegie Mellon University Cyrus Imap Server 2.2.6Carnegie Mellon University Cyrus Imap Server 2.2.8Carnegie Mellon University Cyrus Imap Server 2.0.12Carnegie Mellon University Cyrus Imap Server 2.0.16Carnegie Mellon University Cyrus Imap Server 2.1.10Carnegie Mellon University Cyrus Imap Server 2.2.3Carnegie Mellon University Cyrus Imap Server 2.2.4Ubuntu Ubuntu Linux 4.1Redhat Fedora Core Core 2.0Redhat Fedora Core Core 3.0
10
CVSSv2
CVE-2004-1012
The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and previous versions allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index in...
Carnegie Mellon University Cyrus Imap Server 2.1.7Carnegie Mellon University Cyrus Imap Server 2.1.9Carnegie Mellon University Cyrus Imap Server 2.2.7Carnegie Mellon University Cyrus Imap Server 2.2.8Carnegie Mellon University Cyrus Imap Server 2.1.10Carnegie Mellon University Cyrus Imap Server 2.1.16Carnegie Mellon University Cyrus Imap Server 2.2.4Carnegie Mellon University Cyrus Imap Server 2.2.5Carnegie Mellon University Cyrus Imap Server 2.2.6Carnegie Mellon University Cyrus Imap Server 2.2.2 BetaCarnegie Mellon University Cyrus Imap Server 2.2.3Conectiva Linux 9.0Carnegie Mellon University Cyrus Imap Server 2.2.0 AlphaCarnegie Mellon University Cyrus Imap Server 2.2.1 BetaOpenpkg Openpkg CurrentConectiva Linux 10.0Trustix Secure Linux 2.0Trustix Secure Linux 2.1Redhat Fedora Core Core 2.0Redhat Fedora Core Core 3.0Ubuntu Ubuntu Linux 4.1Trustix Secure Linux 2.2
10
CVSSv2
CVE-2004-1013
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x up to and including 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an inde...
Carnegie Mellon University Cyrus Imap Server 2.1.7Carnegie Mellon University Cyrus Imap Server 2.1.9Carnegie Mellon University Cyrus Imap Server 2.2.7Carnegie Mellon University Cyrus Imap Server 2.2.8Carnegie Mellon University Cyrus Imap Server 2.1.10Carnegie Mellon University Cyrus Imap Server 2.1.16Carnegie Mellon University Cyrus Imap Server 2.2.5Carnegie Mellon University Cyrus Imap Server 2.2.6Carnegie Mellon University Cyrus Imap Server 2.2.2 BetaCarnegie Mellon University Cyrus Imap Server 2.2.3Carnegie Mellon University Cyrus Imap Server 2.2.4Conectiva Linux 9.0Carnegie Mellon University Cyrus Imap Server 2.2.0 AlphaCarnegie Mellon University Cyrus Imap Server 2.2.1 BetaOpenpkg Openpkg CurrentConectiva Linux 10.0Trustix Secure Linux 2.0Trustix Secure Linux 2.1Redhat Fedora Core Core 2.0Redhat Fedora Core Core 3.0Ubuntu Ubuntu Linux 4.1Trustix Secure Linux 2.2
10
CVSSv2
CVE-2004-1011
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 up to and including 2.2.8, with the imapmagicplus option enabled, allows remote malicious users to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
Carnegie Mellon University Cyrus Imap Server 2.1.7Carnegie Mellon University Cyrus Imap Server 2.1.9Carnegie Mellon University Cyrus Imap Server 2.2.6Carnegie Mellon University Cyrus Imap Server 2.2.7Carnegie Mellon University Cyrus Imap Server 2.2.8Carnegie Mellon University Cyrus Imap Server 2.1.10Carnegie Mellon University Cyrus Imap Server 2.1.16Carnegie Mellon University Cyrus Imap Server 2.2.4Carnegie Mellon University Cyrus Imap Server 2.2.5Carnegie Mellon University Cyrus Imap Server 2.2.2 BetaCarnegie Mellon University Cyrus Imap Server 2.2.3Conectiva Linux 9.0Carnegie Mellon University Cyrus Imap Server 2.2.0 AlphaCarnegie Mellon University Cyrus Imap Server 2.2.1 BetaOpenpkg Openpkg CurrentConectiva Linux 10.0Trustix Secure Linux 2.0Trustix Secure Linux 2.1Redhat Fedora Core Core 2.0Redhat Fedora Core Core 3.0Ubuntu Ubuntu Linux 4.1Trustix Secure Linux 2.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook