CVE-2004-0884

Name	CVE-2004-0884
Description	The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-563-3, DSA-568-1
Debian Bugs	275431, 275432, 275553, 276865

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
cyrus-sasl2 (PTS)	buster, buster (security)	2.1.27+dfsg-1+deb10u2	fixed
	bullseye (security), bullseye	2.1.27+dfsg-2.1+deb11u1	fixed
	bookworm	2.1.28+dfsg-10	fixed
	trixie	2.1.28+dfsg1-4	fixed
	sid	2.1.28+dfsg1-6	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
cyrus-sasl	source	woody	1.5.27-3.1woody5		DSA-563-3	275432
cyrus-sasl	source	(unstable)	(unfixed)
cyrus-sasl-mit	source	woody	1.5.24-15woody3		DSA-568-1
cyrus-sasl2	source	(unstable)	2.1.19-1.3			275431, 275432, 275553, 276865