CVE:CVE-2004-1011
CNNVD:CNNVD-200501-121
Cyrus IMAPD是一款开源的IMAP协议实现软件。
Cyrus IMAP Server 2.2.4及之前版本中存在堆栈溢出漏洞。
当启用imapmagicplus选项时，远程攻击者可通过超长的PROXY或LOGIN命令，触发溢出，从而执行任意代码。
solution:Upgrade carnegie_mellon_university cyrus_imap_server to a higher version than 2.1.7,2.1.9,2.1.10,2.1.16,2.2.0_alpha,2.2.1_beta,2.2.2_beta,2.2.3,2.2.4,2.2.5,2.2.6,2.2.7,2.2.8,and avoid the version 2.1.7,2.1.9,2.1.10,2.1.16,2.2.0_alpha,2.2.1_beta,2.2.2_beta,2.2.3,2.2.4,2.2.5,2.2.6,2.2.7,2.2.8; Upgrade openpkg openpkg to a higher version than current,and avoid the version current; Upgrade conectiva linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade redhat fedora_core to a higher version than core_2.0,core_3.0,and avoid the version core_2.0,core_3.0; Upgrade trustix secure_linux to a higher version than 2.0,2.1,2.2,and avoid the version 2.0,2.1,2.2; Upgrade ubuntu ubuntu_linux to a higher version than 4.1,and avoid the version 4.1