Unscored severity · published Oct 7, 2004
CVE-2005-0373
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows…
–
CVSS
3.9%
EPSS
No
On KEV
Description
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Fedora Core · Redhat
core_1.0 · source: NVD
LI
Linux · Conectiva
9.0; 10.0 · source: NVD
MO
Mac OS X · Apple
10.0; 10.0.1; 10.0.2; 10.0.3; 10.0.4; 10.1; +23 more · source: NVD
MO
Mac OS X Server · Apple
10.0; 10.1; 10.1.1; 10.1.2; 10.1.3; 10.1.4; +19 more · source: NVD
OP
Openpkg · Openpkg
2.1; 2.2 · source: NVD
SA
Sasl · Cyrus
1.5.24; 1.5.27; 1.5.28; 2.1.9; 2.1.10; 2.1.11; +8 more · source: NVD
SC
Suse Cvsup · Suse
16.1h_36.i586 · source: NVD
SL
Suse Linux · Suse
1.0; 8.0; 8.0; 8.1; 8.2; 9.0; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0373
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0373
Patch
http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml
Patch
http://www.linuxcompatible.org/print42495.html
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2005:054
Patch
http://www.monkey.org/openbsd/archive/ports/0407/msg00265.html
Patch
http://www.securityfocus.com/bid/11347
Vendor Advisory
https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff?r1=1.170&r2=1.171
More from Mac OS X
9.8
CVE-2021-1871
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
9.8
CVE-2021-1870
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability
8.8
CVE-2022-2294
WebRTC Heap Buffer Overflow Vulnerability
8.8
CVE-2021-1789
Apple Multiple Products Type Confusion Vulnerability