PT-2004-2015 · Cyrus · Cyrus Imap Server

Stefan Esser · Published 2004-12-01 · Updated 2016-12-08 · CVE-2004-1013

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Cyrus IMAP Server versions 2.2.x through 2.2.8

Description: The issue concerns the argument parser of the FETCH command in Cyrus IMAP Server, which allows remote authenticated users to execute arbitrary code. This can be achieved through specific commands, such as "body[p", "binary[p", or "binary[p", that cause an index increment error. This error leads to an out-of-bounds memory corruption, enabling the execution of arbitrary code.

Recommendations: For Cyrus IMAP Server versions 2.2.x through 2.2.8, consider disabling the FETCH command until a patch is available to prevent the execution of arbitrary code. Restrict access to the affected command to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-1013

DSA-597-1

Affected Products

Cyrus Imap Server

References · 13

• https://ubuntu.com/usn/usn-31-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1013 · Security Note
• https://osv.dev/vulnerability/CVE-2004-1013 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-1013 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200411-34.xml · Vendor Advisory
• http://debian.org/security/2004/dsa-597 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2004:139 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-1013 · Vendor Advisory
• http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143 · Note
• http://marc.info/?l=bugtraq&m=110123023521619&w=2 · Note
• http://asg.web.cmu.edu/cyrus/download/imapd/changes.html · Note
• http://security.e-matters.de/advisories/152004.html · Note
• http://secunia.com/advisories/13274 · Note