CVE:CVE-2004-1015
CNNVD:CNNVD-200501-200
Cyrus IMAPD是一款开源的IMAP协议实现软件。
Cyrus IMAP Server 2.2.9及之前版本中存在缓冲区溢出漏洞。
当启用imapmagicplus选项时，远程攻击者可利用此漏洞执行任意代码。
solution:Upgrade carnegie_mellon_university cyrus_imap_server to a higher version than 1.4,1.5.19,2.0.12,2.0.16,2.1.7,2.1.9,2.1.10,2.1.16,2.2.0_alpha,2.2.1_beta,2.2.2_beta,2.2.3,2.2.4,2.2.5,2.2.6,2.2.7,2.2.8,2.2.9,and avoid the version 1.4,1.5.19,2.0.12,2.0.16,2.1.7,2.1.9,2.1.10,2.1.16,2.2.0_alpha,2.2.1_beta,2.2.2_beta,2.2.3,2.2.4,2.2.5,2.2.6,2.2.7,2.2.8,2.2.9; Upgrade redhat fedora_core to a higher version than core_2.0,core_3.0,and avoid the version core_2.0,core_3.0; Upgrade ubuntu ubuntu_linux to a higher version than 4.1,and avoid the version 4.1