CyberSec.Space Logo
Back to CVE Browser

CVE-2004-1067

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1850%
EPSS Percentile33.88th
PublishedJan 10, 2005
Last ModifiedApr 16, 2026

Vulnerability Description

Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.

Affected Platforms (CPE)

📦
Carnegie Mellon University

Cyrus Imap Server

= 1.4
📦
Carnegie Mellon University

Cyrus Imap Server

= 1.5.19
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.0.12
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.0.16
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.1.7
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.1.9
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.1.10
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.1.16
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.2.0_alpha
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.2.1_beta
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.2.2_beta
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.2.3
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.2.4
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.2.5
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.2.6
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.2.7
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.2.8
📦
Carnegie Mellon University

Cyrus Imap Server

= 2.2.9
💻
Redhat

Fedora Core

= core_2.0
💻
Redhat

Fedora Core

= core_3.0
💻
Ubuntu

Ubuntu Linux

= 4.1
💻
Ubuntu

Ubuntu Linux

= 4.1

References & Advisories

🔗 http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
🔗 http://www.securityfocus.com/bid/11738
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/18333
🔗 https://www.ubuntu.com/usn/usn-37-1/
🔗 http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
🔗 http://www.securityfocus.com/bid/11738
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/18333
🔗 https://www.ubuntu.com/usn/usn-37-1/

Related Vulnerabilities

CVE-2004-101310.0

The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arb...

CVE-2004-101210.0

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arb...

CVE-2004-101110.0

Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attacke...

CVE-2004-101510.0

Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attacke...