CVE-2004-0777

CVE-2004-0777 describes a format string vulnerability in the auth_debug function of Courier-IMAP versions 1.6.0 through 2.2.1 and 3.x through 3.0.3, specifically when login debugging is enabled. This critical flaw allows unauthenticated remote attackers to execute arbitrary code on affected systems. With a CVSS score of 7.5, it presents a high risk due to its network-based attack vector and low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an ExploitDB entry confirms the existence of public exploit code, though there is no evidence of widespread active exploitation or significant community discussion.