CVE-2004-1035 Integer overflow in n/a
Remote attackers can crash the IMAP proxy or leak sensitive data via integer signedness errors in literal value handling.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-1035?
CVE-2004-1035 is a medium-severity vulnerability in n/a, published on 16 Nov 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select.c for up-imapproxy IMAP proxy 1.2.2 allow remote attackers to cause a denial of service (server crash) and possibly leak sensitive information via certain literal values that are not properly handled when using the IMAP_Line_Read function.
Which versions are affected by CVE-2004-1035?
It affects 1 product.
Products include Imap Proxy Imap Proxy.
How do I fix CVE-2004-1035?
Upgrade to a fixed version.
Is CVE-2004-1035 being exploited?
There is no known exploitation of CVE-2004-1035 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2004-1035, GHSA-jfvg-fhfm-45f8.