CVE-2004-1013
EPSS 10.2%
Description
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.
How to fix CVE-2004-1013
To remediate CVE-2004-1013, upgrade the affected package to a fixed version below.
- Debian/cyrus-imapd—upgrade to 1.5.19-20 or later
Is CVE-2004-1013 being exploited?
Moderate — EPSS is 10.2%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 1.5.19-20