Description
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.
References
- cyrus-mysaslcanonuser-offbyone-bo(18333) vdb-entry
- http://asg.web.cmu.edu/cyrus/download/imapd/changes.html
- 11738 vdb-entry
- USN-37-1 vendor-advisory