SA
Product
Sasl
4
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Sasl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-1721 | – | Apr 11 | digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to… Affected: 2.1.18; 2.1.18_r1; 2.1.18_r2; 2.1.19; 2.1.20 |
| CVE-2004-0884 | – | Jan 27 | The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users… Affected: 1.5.24; 1.5.27; 1.5.28; 2.1.9; 2.1.10; 2.1.11; +8 more |
| CVE-2005-0373 | – | Oct 7 | Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows… Affected: 1.5.24; 1.5.27; 1.5.28; 2.1.9; 2.1.10; 2.1.11; +8 more |
| CVE-2002-2043 | – | Dec 31 | SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as… Affected: 1.5.24; 1.5.27 |
Showing 4