FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0777

This CVE name corresponds to:

Entered	Topic
2004-08-22	courier-imap -- format string vulnerability in debug mode

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0777 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0777
Phase	Assigned(20040811)

Description

Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.

References

Source	Reference
IDEFENSE	20040818 Courier-IMAP Remote Format String Vulnerability
GENTOO	GLSA-200408-19
TRUSTIX	2004-0043
BID	10976
XF	courierimap-authdebug-format-string(17034)