Gain a shell remotely : cyrus-imsp abook_dbname Buffer Overflow Vulnerability

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.11953

Category: Gain a shell remotely

Title: cyrus-imsp abook_dbname Buffer Overflow Vulnerability

Summary: The cyrus-imsp (Internet Message Support Protocol) daemon is; prone to a buffer overflow vulnerability.

Description: Summary:
The cyrus-imsp (Internet Message Support Protocol) daemon is
prone to a buffer overflow vulnerability.

Vulnerability Insight:
The overflow occurs when the user issues a too long argument as
his name, causing an overflow in the abook_dbname function command.

Vulnerability Impact:
An attacker could exploit this bug to execute arbitrary code on
this system with the privileges of the root user.

Solution:
Update to version 1.6a4, 1.7a or later.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Copyright Copyright (C) 2003 Noam Rathaus

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.11953
Category:	Gain a shell remotely
Title:	cyrus-imsp abook_dbname Buffer Overflow Vulnerability
Summary:	The cyrus-imsp (Internet Message Support Protocol) daemon is; prone to a buffer overflow vulnerability.
Description:	Summary: The cyrus-imsp (Internet Message Support Protocol) daemon is prone to a buffer overflow vulnerability. Vulnerability Insight: The overflow occurs when the user issues a too long argument as his name, causing an overflow in the abook_dbname function command. Vulnerability Impact: An attacker could exploit this bug to execute arbitrary code on this system with the privileges of the root user. Solution: Update to version 1.6a4, 1.7a or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2003 Noam Rathaus