CVE-2004-1067

No fix known EPSS 5%

Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.

Published 2004-12-10 · CVE record · OSV

Products: carnegie_mellon_university cyrus_imap_server, redhat fedora_core, ubuntu_linux