Description
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.
References
- cyrus-magic-plus-bo(18274) vdb-entry
- http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
- MDKSA-2004:139 vendor-advisory
- [cyrus-announce] 20041123 Cyrus IMAPd 2.2.10 Released mailing-list
- GLSA-200411-34 vendor-advisory