CVE-2004-0777
NoneCVSS
—
EPSS
10.9%
Published
Oct 20, 2004
CISA due date
—
The record
Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | courier | 0 | 0.45.6-1 |
| Debian:11 | courier | 0 | 0.45.6-1 |
| Debian:12 | courier | 0 | 0.45.6-1 |
| Debian:13 | courier | 0 | 0.45.6-1 |
Related vulnerabilities
- CVE-2026-63073 Issue summary: OpenSSL CMP response validation passed an unexpected response sender… CWE-134
- CVE-2026-6390 A flaw was found in GNU nano's multi-buffer error message handling. CWE-134
- CVE-2026-57877 An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011… CWE-134
- CVE-2026-10828 A format string vulnerability has been found in the "alias" parameter of the Serial Param… CWE-134
- CVE-2025-10262 Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to… CWE-134
- CVE-2026-12174 A security vulnerability has been detected in D-Link DCS-935L 1.10.01. CWE-134
- CVE-2026-6250 An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2… CWE-134
- CVE-2026-6241 An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo… CWE-134