← Database

CVE-2004-1067

CRITICAL CVSS: 10.0 Published: 2005-01-10 Modified: 2026-06-16

Description

Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.

Affected Platforms

Redhat Fedora CoreUbuntu Ubuntu LinuxCarnegie Mellon University Cyrus Imap Server

Weakness Type

NVD-CWE-Other

References