CVE-2006-1721

CVSS V2 Low 2.6 CVSS V3 None
Description
digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.
Overview
  • CVE ID
  • CVE-2006-1721
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2006-04-11T23:02:00
  • Last Modified Date
  • 2018-10-18T16:34:02
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:cyrus:sasl:2.1.18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cyrus:sasl:2.1.18_r1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cyrus:sasl:2.1.18_r2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cyrus:sasl:2.1.19:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:cyrus:sasl:2.1.20:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:H/Au:N/C:N/I:N/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • HIGH
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • PARTIAL
  • Base Score
  • 2.6
  • Severity
  • LOW
  • Exploitability Score
  • 4.9
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://labs.musecurity.com/advisories/MU-200604-01.txt Patch
http://www.securityfocus.com/bid/17446 Patch
http://secunia.com/advisories/19618 Patch Vendor Advisory
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&msg=7775
http://www.debian.org/security/2006/dsa-1042
http://secunia.com/advisories/19809 Vendor Advisory
http://secunia.com/advisories/19825 Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200604-09.xml
http://secunia.com/advisories/19753 Vendor Advisory
http://www.trustix.org/errata/2006/0024
http://secunia.com/advisories/19964 Vendor Advisory
http://www.novell.com/linux/security/advisories/2006_05_05.html
http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html
http://secunia.com/advisories/22187 Vendor Advisory
http://securitytracker.com/id?1016960
http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044992.html
http://secunia.com/advisories/20014 Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-426.htm
http://www.mandriva.com/security/advisories?name=MDKSA-2006:073
http://www.redhat.com/support/errata/RHSA-2007-0795.html
http://www.redhat.com/support/errata/RHSA-2007-0878.html
ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc
http://secunia.com/advisories/26708 Vendor Advisory
http://secunia.com/advisories/26857 Vendor Advisory
http://secunia.com/advisories/27237 Vendor Advisory
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
http://secunia.com/advisories/30535 Vendor Advisory
http://www.vupen.com/english/advisories/2008/1744 Vendor Advisory
http://www.vupen.com/english/advisories/2006/3852 Vendor Advisory
http://www.vupen.com/english/advisories/2006/1306 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25738
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9861
https://usn.ubuntu.com/272-1/
http://www.securityfocus.com/archive/1/493080/100/0/threaded
History
Created Old Value New Value Data Type Notes
2022-05-10 18:09:08 Added to TrackCVE