CVE-2004-1013
EPSS 5.8%
描述
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.
如何修補 CVE-2004-1013
要修補 CVE-2004-1013,請將受影響套件升級到下列已修補版本。
- Debian/cyrus-imapd—升級至 1.5.19-20 或更新版本
CVE-2004-1013 正在被利用嗎?
中等 — EPSS 為 5.8%,可持續追蹤但非最高優先。
受影響套件(1)
- from 0, < 1.5.19-20