CVE-2005-0546 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-0546
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-0546

Description: Multiple buffer overflows in Cyrus IMAPd before 2.2.11 may allow attackers to execute arbitrary code via (1) an off-by-one error in the imapd annotate extension, (2) an off-by-one error in "cached header handling," (3) a stack-based buffer overflow in fetchnews, or (4) a stack-based buffer overflow in imapd.

CVE Status: Candidate

References: ST 1013278 SAID Secunia Advisory: SA14383 REDHAT http://www.redhat.com/support/errata/RHSA-2005-408.html MLIST http://asg.web.cmu.edu/archive/message.php?mailbox=archive.info-cyrus&msg=33723 MANDRAKE http://www.mandrakesoft.com/security/advisories?name=MDKSA-2005:051 GENTOO http://security.gentoo.org/glsa/glsa-200502-29.xml FEDORA http://www.securityfocus.com/archive/1/archive/1/430294/100/0/threaded CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=82404 CONECTIVA http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000937 BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=110972236203397&w=2 BID 12636

Return to the previous page.