Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2004-0884HistoryJan 27, 2005 - 5:00 a.m.
CVE-2004-0884
2005-01-2705:00:00
Debian Security Bug Tracker
security-tracker.debian.org
6
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0005 Low
EPSS
Percentile
15.9%
The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | cyrus-sasl2 | < 2.1.19-1.3 | cyrus-sasl2_2.1.19-1.3_all.deb |
| Debian | 11 | all | cyrus-sasl2 | < 2.1.19-1.3 | cyrus-sasl2_2.1.19-1.3_all.deb |
| Debian | 999 | all | cyrus-sasl2 | < 2.1.19-1.3 | cyrus-sasl2_2.1.19-1.3_all.deb |
| Debian | 13 | all | cyrus-sasl2 | < 2.1.19-1.3 | cyrus-sasl2_2.1.19-1.3_all.deb |
Related
nessus
nessus
RHEL 2.1 / 3 : cyrus-sasl (RHSA-2004:546)
2004-10-08 00:00:00
Fedora Core 2 : cyrus-sasl-2.1.18-2.2 (2004-332)
2004-10-11 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200410-05 (Cyrus-SASL)
2008-09-24 00:00:00
Debian Security Advisory DSA 563-1 (cyrus-sasl)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-568-1)
2008-01-17 00:00:00
nvd
nvd
CVE-2004-0884
2005-01-27 05:00:00
redhat
redhat
(RHSA-2004:546) cyrus-sasl security update
2004-10-07 00:00:00
debian
debian
osv
osv
cyrus-sasl - unsanitised input
2004-10-14 00:00:00
cyrus-sasl-mit - unsanitised input
2004-10-16 00:00:00
securityvulns
securityvulns
[ GLSA 200410-05 ] Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities
2004-10-08 00:00:00
cve
cve
CVE-2004-0884
2005-01-27 05:00:00
ubuntucve
ubuntucve
CVE-2004-0884
2005-01-27 00:00:00
cvelist
cvelist
CVE-2004-0884
2004-10-21 04:00:00
freebsd
freebsd
cyrus-sasl -- dynamic library loading and set-user-ID applications
2004-09-22 00:00:00
gentoo
gentoo
Cyrus-SASL: Buffer overflow and SASL_PATH vulnerabilities
2004-10-07 00:00:00
suse
suse
remote denial of service in kernel
2004-10-21 07:52:50
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0005 Low
EPSS
Percentile
15.9%
Related for DEBIANCVE:CVE-2004-0884