CVE-2004-0777

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-10-20 · updated 2026-06-16
Weakness: CWE-134

Description

Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.

Affected products

Inter7 Courier-Imap: 1.6, 1.7, 2.0.0, 2.1, 2.1.1, 2.1.2 (+2)

References

http://security.gentoo.org/glsa/glsa-200408-19.xml
http://www.securityfocus.com/bid/10976
http://www.trustix.net/errata/2004/0043/
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=131
https://exchange.xforce.ibmcloud.com/vulnerabilities/17034
http://security.gentoo.org/glsa/glsa-200408-19.xml
http://www.securityfocus.com/bid/10976
http://www.trustix.net/errata/2004/0043/
http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=131
https://exchange.xforce.ibmcloud.com/vulnerabilities/17034

Get alerted when CVE-2004-0777 or the next vulnerability affects your stack