Search/CVE-2004-0884

● CVE

CVE-2004-0884

Vendorconectiva, cyrusProductlinux, saslDiscoveredJan 27, 2005UpdatedApr 16, 2026

The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.

View graph Watch Export

CVSS v3.1

—

EPSS

0.50%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

0

sources referencing this CVE

Related IOCs

0

seen in the same coverage

EPSS Trend

Aug 16, 2026 → Sep 13, 2026

● 0.00pp

0.51% → 0.50% over 2 tracked changes

Connections

2 relationships

Timeline

disclosure → media coverage

Jan 27, 2005

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026