CVE-2004-1015: Buffer Overflow
Published Dec 1, 2004
·Updated
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.
Affected Software
22 affected components
Carnegie Mellon University Cyrus Imap Server=2.2.6
Carnegie Mellon University Cyrus Imap Server=2.1.10
Carnegie Mellon University Cyrus Imap Server=2.2.8
Carnegie Mellon University Cyrus Imap Server=2.2.9
Carnegie Mellon University Cyrus Imap Server=2.2.0_alpha
Carnegie Mellon University Cyrus Imap Server=2.0.16
Carnegie Mellon University Cyrus Imap Server=1.5.19
Carnegie Mellon University Cyrus Imap Server=2.1.9
Carnegie Mellon University Cyrus Imap Server=2.2.5
Carnegie Mellon University Cyrus Imap Server=2.2.2_beta
Carnegie Mellon University Cyrus Imap Server=1.4
Carnegie Mellon University Cyrus Imap Server=2.1.16
Carnegie Mellon University Cyrus Imap Server=2.2.7
Carnegie Mellon University Cyrus Imap Server=2.2.3
Carnegie Mellon University Cyrus Imap Server=2.2.1_beta
Carnegie Mellon University Cyrus Imap Server=2.1.7
Carnegie Mellon University Cyrus Imap Server=2.2.4
Carnegie Mellon University Cyrus Imap Server=2.0.12
redhat Fedora Core=core_2.0
Ubuntu Ubuntu Linux=4.1
redhat Fedora Core=core_3.0
Ubuntu Ubuntu Linux=4.1
Remediation
Patch Available
Event History
Dec 1, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1015?
CVE-2004-1015 has a high severity rating due to potential remote code execution vulnerabilities.
2
How do I fix CVE-2004-1015?
To fix CVE-2004-1015, update to a patched version of the Cyrus IMAP Server that resolves the buffer overflow issue.
3
What versions of Cyrus IMAP Server are affected by CVE-2004-1015?
CVE-2004-1015 affects Cyrus IMAP Server version 2.2.9 and earlier, along with specific prior versions.
4
Can CVE-2004-1015 be exploited remotely?
Yes, CVE-2004-1015 can be exploited remotely by attackers if the imapmagicplus option is enabled.
5
What type of vulnerability is CVE-2004-1015?
CVE-2004-1015 is a buffer overflow vulnerability that may allow remote attackers to execute arbitrary code.