PT-2004-1388 · Courier · Courier-Imap+2

Publicado 2004-03-16 · Atualizado 2017-07-11 · CVE-2004-0224

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Courier-IMAP versions prior to 3.0.0 Courier versions prior to 0.45 SqWebMail versions prior to 4.0.0

Description The issue is related to multiple buffer overflows in the iso2022jp.c or shiftjis.c files. This may allow remote attackers to execute arbitrary code when a Unicode character is out of the BMP range.

Recommendations For Courier-IMAP versions prior to 3.0.0, update to version 3.0.0 or later. For Courier versions prior to 0.45, update to version 0.45 or later. For SqWebMail versions prior to 4.0.0, update to version 4.0.0 or later.

Correção

Identificadores relacionados

CVE-2004-0224

Produtos afetados

Courier

Courier-Imap

Sqwebmail

Referências · 8

• http://sourceforge.net/project/shownotes.php?release_id=5767 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2004-0224 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0224 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15434 · Nota
• https://osv.dev/vulnerability/CVE-2004-0224 · Aviso do Fabricante
• http://secunia.com/advisories/11087 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0224 · Nota de Segurança
• http://securityfocus.com/bid/9845 · Aviso do Fabricante