CVE-2004-0884
Fixed in a distro release EPSS <1%
The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.
Products: cyrus sasl, conectiva linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cyrus-sasl2 | 2.1.19-1.3 |
| Debian 13 | cyrus-sasl2 | 2.1.19-1.3 |
| Debian 14 | cyrus-sasl2 | 2.1.19-1.3 |
| Debian 3.0 | cyrus-sasl | 1.5.27-3.1woody5 |
| Debian 3.0 | cyrus-sasl-mit | 1.5.24-15woody3 |
| Red Hat Enterprise Linux 3 | cyrus-sasl | 0:2.1.15-10 |
| Red Hat Enterprise Linux 3 | cyrus-sasl-debuginfo | 0:2.1.15-10 |
| Red Hat Enterprise Linux 3 | cyrus-sasl-devel | 0:2.1.15-10 |
| Red Hat Enterprise Linux 3 | cyrus-sasl-gssapi | 0:2.1.15-10 |
| Red Hat Enterprise Linux 3 | cyrus-sasl-md5 | 0:2.1.15-10 |
| Red Hat Enterprise Linux 3 | cyrus-sasl-plain | 0:2.1.15-10 |