cyrus-sasl: remote buffer overflow [LWN.net]

Package(s):

cyrus-sasl

CVE #(s):

CAN-2004-0884

Created:

October 7, 2004

Updated:

March 16, 2005

Description:

cyrus-sasl has a vulnerability involving a buffer overflow in the digestmda5.c file. A remote attacker may be able to compromise the system. Also, a local user may be able to exploit a vulnerability by using the SASL_PATH environment variable.

Alerts:

Mandrake	MDKSA-2005:054	2005-03-15
SuSE	SUSE-SA:2005:013	2005-03-03
Fedora-Legacy	FLSA:2137	2005-02-17
OpenPKG	OpenPKG-SA-2005.004	2005-01-28
Conectiva	CLA-2004:889	2004-11-11
Debian	DSA-568-1	2004-10-16
Debian	DSA-563-3	2004-10-14
Debian	DSA-563-2	2004-10-12
Debian	DSA-563-1	2004-10-12
Trustix	TSLSA-2004-0053	2004-10-08
Mandrake	MDKSA-2004:106	2004-10-07
Red Hat	RHSA-2004:546-02	2004-10-07
Gentoo	200410-05	2004-10-07

(Log in to post comments)