CVE-2004-0777

Name	CVE-2004-0777
Description	Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	266723

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
courier (PTS)	bookworm, bullseye	1.0.16-3	fixed
	trixie	1.4.1-3+deb13u1	fixed
	forky, sid	1.4.1-10	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
courier	source	(unstable)	0.45.6-1	medium		266723

0.45.6-1 is the first upload after the debug stuff rewrite
mentioned in the bug report.