Read the docs
TI-2004-00802 Aliases CVE-2004-0884GHSA-pggp-j979-w3jj

The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the…

Priority LOW 32Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.

Why it matters now

EPSS 0.00502 43rd percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPEVersionsRoleVendor
cpe:2.3:a:cyrus:sasl:1.5.24:*:*:*:*:*:*:*1.5.24VulnerableCyrus
cpe:2.3:a:cyrus:sasl:1.5.27:*:*:*:*:*:*:*1.5.27VulnerableCyrus
cpe:2.3:a:cyrus:sasl:1.5.28:*:*:*:*:*:*:*1.5.28VulnerableCyrus
cpe:2.3:a:cyrus:sasl:2.1.9:*:*:*:*:*:*:*2.1.9VulnerableCyrus
cpe:2.3:a:cyrus:sasl:2.1.10:*:*:*:*:*:*:*2.1.10VulnerableCyrus
cpe:2.3:a:cyrus:sasl:2.1.11:*:*:*:*:*:*:*2.1.11VulnerableCyrus
cpe:2.3:a:cyrus:sasl:2.1.12:*:*:*:*:*:*:*2.1.12VulnerableCyrus
cpe:2.3:a:cyrus:sasl:2.1.13:*:*:*:*:*:*:*2.1.13VulnerableCyrus
cpe:2.3:a:cyrus:sasl:2.1.14:*:*:*:*:*:*:*2.1.14VulnerableCyrus
cpe:2.3:a:cyrus:sasl:2.1.15:*:*:*:*:*:*:*2.1.15VulnerableCyrus
  • cpe:2.3:a:cyrus:sasl:1.5.24:*:*:*:*:*:*:* Versions 1.5.24 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:1.5.27:*:*:*:*:*:*:* Versions 1.5.27 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:1.5.28:*:*:*:*:*:*:* Versions 1.5.28 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:2.1.9:*:*:*:*:*:*:* Versions 2.1.9 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:2.1.10:*:*:*:*:*:*:* Versions 2.1.10 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:2.1.11:*:*:*:*:*:*:* Versions 2.1.11 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:2.1.12:*:*:*:*:*:*:* Versions 2.1.12 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:2.1.13:*:*:*:*:*:*:* Versions 2.1.13 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:2.1.14:*:*:*:*:*:*:* Versions 2.1.14 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:2.1.15:*:*:*:*:*:*:* Versions 2.1.15 Vulnerable ·Cyrus
Show 6 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cyrus:sasl:2.1.16:*:*:*:*:*:*:*2.1.16VulnerableCyrus
cpe:2.3:a:cyrus:sasl:2.1.17:*:*:*:*:*:*:*2.1.17VulnerableCyrus
cpe:2.3:a:cyrus:sasl:2.1.18:*:*:*:*:*:*:*2.1.18VulnerableCyrus
cpe:2.3:a:cyrus:sasl:2.1.18_r1:*:*:*:*:*:*:*2.1.18_r1VulnerableCyrus
cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*9.0VulnerableConectiva
cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*10.0VulnerableConectiva
  • cpe:2.3:a:cyrus:sasl:2.1.16:*:*:*:*:*:*:* Versions 2.1.16 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:2.1.17:*:*:*:*:*:*:* Versions 2.1.17 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:2.1.18:*:*:*:*:*:*:* Versions 2.1.18 Vulnerable ·Cyrus
  • cpe:2.3:a:cyrus:sasl:2.1.18_r1:*:*:*:*:*:*:* Versions 2.1.18_r1 Vulnerable ·Cyrus
  • cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Conectiva
  • cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Conectiva

Remediation

Red Hat 1 advisory

  • RHSA-2004:546 Released 2004-10-07 · Red Hat rating Important
    cyrus-sasl security update
    • Red Hat Desktop version 3 cyrus-sasl-2.1.15-10, cyrus-sasl-2.1.15-10.i386, cyrus-sasl-devel-2.1.15-10 +7
    • Red Hat Enterprise Linux AS version 3 cyrus-sasl-2.1.15-10, cyrus-sasl-2.1.15-10.i386, cyrus-sasl-2.1.15-10.ia64 +17
    • Red Hat Enterprise Linux ES version 3 cyrus-sasl-2.1.15-10, cyrus-sasl-2.1.15-10.i386, cyrus-sasl-2.1.15-10.ia64 +12
    • Red Hat Enterprise Linux WS version 3 cyrus-sasl-2.1.15-10, cyrus-sasl-2.1.15-10.i386, cyrus-sasl-2.1.15-10.ia64 +12

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Desktop version 3Fixed RHSA-2004:546
Red Hat Enterprise Linux AS version 3Fixed RHSA-2004:546
Red Hat Enterprise Linux ES version 3Fixed RHSA-2004:546
Red Hat Enterprise Linux WS version 3Fixed RHSA-2004:546

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-0884
  2. 2026-10-03 Alias added: GHSA-pggp-j979-w3jj

References

Patch 1

Advisory 8

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences