NetSight
IP …
high7.5

CVE-2005-0373

Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any offici…

Impact

Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.

Affected products

VendorProductAffected versions
CyrusSasl
Versions 1.5.24, 1.5.27, 1.5.28, 2.1.9, 2.1.10, 2.1.11
OpenpkgOpenpkg
Versions 2.1, 2.2
SuseSuse Cvsup
Version 16.1h_36.i586
ConectivaLinux
Versions 9.0, 10.0
AppleMac Os X
Versions 10.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.1
AppleMac Os X Server
Versions 10.0, 10.1, 10.1.1, 10.1.2, 10.1.3, 10.1.4
RedhatFedora Core
Version core_1.0
SuseSuse Linux
Versions 1.0, 8.0, 8.1, 8.2, 9.0, 9.1

References