CVE-2004-1013

CVE-2004-1013 describes a critical remote code execution vulnerability in Cyrus IMAP Server versions 2.2.x through 2.2.8, affecting products from vendors like Red Hat and Ubuntu. Authenticated attackers can exploit an argument parser error in FETCH commands (e.g., "body[p") to trigger an out-of-bounds memory corruption. This vulnerability carries a maximum CVSS score of 10.0, indicating a severe risk with network-based attacks requiring low complexity and no authentication, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, with 10 mentions, suggesting awareness among security researchers.