CVE-2004-1011
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus...
CVE-2004-1011 is a high vulnerability (CVSS 10.0) in Carnegie Mellon University Cyrus Imap Server, published December 1, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.84%, the 93rd percentile. No source names a fixed version.
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
- Record
CVE-2004-1011- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
- Record
CVE-2004-1011- Updated
- 2026-11-02
EUVDEUVD-2004-1009 No score
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
- Record
EUVD-2004-1009- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p2x5-gpg6-5r2r No score
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus...
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
- Record
GHSA-p2x5-gpg6-5r2r- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
security.e-matters.de/advisories/152004.html
exchange.xforce.ibmcloud.com/vulnerabilities/18198
asg.web.cmu.edu/cyrus/download/imapd/changes.html
mandriva.com/security/advisories?name=MDKSA-2004:139
marc.info?l=bugtraq&m=110123023521619&w=2