low2.6
CVE-2006-1721
digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthent…
Impact
digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cyrus | Sasl | Versions 2.1.18, 2.1.18_r1, 2.1.18_r2, 2.1.19, 2.1.20 |
Weakness classification
References
- NVD record
- CVE.org record
- http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&msg=7775
- http://labs.musecurity.com/advisories/MU-200604-01.txt
- http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044992.html
- http://secunia.com/advisories/19618
- http://secunia.com/advisories/19753
- http://secunia.com/advisories/19809
- http://secunia.com/advisories/19825
- http://secunia.com/advisories/19964
- http://secunia.com/advisories/20014
- http://secunia.com/advisories/22187
- http://secunia.com/advisories/26708
- http://secunia.com/advisories/26857
- http://secunia.com/advisories/27237
- http://secunia.com/advisories/30535
- http://securitytracker.com/id?1016960
- http://support.avaya.com/elmodocs2/security/ASA-2007-426.htm
- http://www.debian.org/security/2006/dsa-1042
- http://www.gentoo.org/security/en/glsa/glsa-200604-09.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:073
- http://www.novell.com/linux/security/advisories/2006_05_05.html
- http://www.redhat.com/support/errata/RHSA-2007-0795.html
- http://www.redhat.com/support/errata/RHSA-2007-0878.html
- http://www.securityfocus.com/archive/1/493080/100/0/threaded
- http://www.securityfocus.com/bid/17446