CVE-2004-1012

CVE-2004-1012 describes a critical vulnerability in Cyrus IMAP Server versions 2.2.6 and earlier, affecting products from vendors like Red Hat and Ubuntu. This flaw allows remote authenticated users to execute arbitrary code due to an argument parsing error in the PARTIAL command, leading to an out-of-bounds memory corruption. With a CVSS score of 10.0, it represents a severe risk with network-based exploitation, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.