{
  "schema_version": "1.4.0",
  "id": "GHSA-p9j6-5f4r-fcwc",
  "modified": "2025-04-03T04:06:50Z",
  "published": "2022-04-29T02:58:47Z",
  "aliases": [
    "CVE-2004-1013"
  ],
  "details": "The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) \"body[p\", (2) \"binary[p\", or (3) \"binary[p\") that cause an index increment error that leads to an out-of-bounds memory corruption.",
  "severity": [],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-1013"
    },
    {
      "type": "WEB",
      "url": "https://www.ubuntu.com/usn/usn-31-1"
    },
    {
      "type": "WEB",
      "url": "http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143"
    },
    {
      "type": "WEB",
      "url": "http://asg.web.cmu.edu/cyrus/download/imapd/changes.html"
    },
    {
      "type": "WEB",
      "url": "http://marc.info/?l=bugtraq&m=110123023521619&w=2"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/13274"
    },
    {
      "type": "WEB",
      "url": "http://security.e-matters.de/advisories/152004.html"
    },
    {
      "type": "WEB",
      "url": "http://security.gentoo.org/glsa/glsa-200411-34.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2004/dsa-597"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2004:139"
    }
  ],
  "database_specific": {
    "cwe_ids": [],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2005-01-10T05:00:00Z"
  }
}