PT-2004-1388 · Courier · Courier-Imap+2

Published 2004-03-16 · Updated 2017-07-11 · CVE-2004-0224

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Courier-IMAP versions prior to 3.0.0 Courier versions prior to 0.45 SqWebMail versions prior to 4.0.0

Description The issue is related to multiple buffer overflows in the iso2022jp.c or shiftjis.c files. This may allow remote attackers to execute arbitrary code when a Unicode character is out of the BMP range.

Recommendations For Courier-IMAP versions prior to 3.0.0, update to version 3.0.0 or later. For Courier versions prior to 0.45, update to version 0.45 or later. For SqWebMail versions prior to 4.0.0, update to version 4.0.0 or later.

Fix

Related Identifiers

CVE-2004-0224

Affected Products

Courier

Courier-Imap

Sqwebmail

References · 8

• http://sourceforge.net/project/shownotes.php?release_id=5767 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-0224 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0224 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0224 · Vendor Advisory
• http://secunia.com/advisories/11087 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0224 · Security Note
• http://securityfocus.com/bid/9845 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15434 · Note