Vulnerabilities > Carnegie Mellon University > Cyrus Imap Server > 1.5.19

DATE CVE VULNERABILITY TITLE RISK
2005-01-10 CVE-2004-1067 Remote Unspecified vulnerability in Cyrus IMAPD
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.
network
low complexity
carnegie-mellon-university redhat ubuntu
critical
10.0
2005-01-10 CVE-2004-1015 Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.
network
low complexity
carnegie-mellon-university redhat ubuntu
critical
10.0
2004-06-14 CVE-2002-1580 Unspecified vulnerability in Carnegie Mellon University Cyrus Imap Server
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.
network
low complexity
carnegie-mellon-university
7.5