CVE-2004-0884

Impact:
Important
Public Date:
2004-10-07
Bugzilla:
1617313: CVE-2004-0884 security flaw

The MITRE CVE dictionary describes this issue as:

The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.

Find out more about CVE-2004-0884 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 2.1 (cyrus-sasl) RHSA-2004:546 2004-10-07
Red Hat Enterprise Linux 3 (cyrus-sasl) RHSA-2004:546 2004-10-07

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.