CVE-2002-1580
NoneCVSS
—
EPSS
16.5%
Published
Jun 14, 2004
CISA due date
—
The record
Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | cyrus-imapd | 0 | 1.5.19-9.10 |
| Debian:12 | cyrus-imapd | 0 | 1.5.19-9.10 |
| Debian:13 | cyrus-imapd | 0 | 1.5.19-9.10 |
| Debian:3.0 | cyrus-imapd | 0 | 1.5.19-9.1 |