CVE-2006-1721
Fixed in a distro release EPSS 2%
digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.
Products: cyrus sasl
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cyrus-sasl2 | 2.1.19.dfsg1-0.2 |
| Debian 13 | cyrus-sasl2 | 2.1.19.dfsg1-0.2 |
| Debian 14 | cyrus-sasl2 | 2.1.19.dfsg1-0.2 |
| Debian 3.1 | cyrus-sasl2 | 2.1.19-1.5sarge1 |
| Red Hat Enterprise Linux 3 | cyrus-sasl | 0:2.1.15-15 |
| Red Hat Enterprise Linux 3 | cyrus-sasl-debuginfo | 0:2.1.15-15 |
| Red Hat Enterprise Linux 3 | cyrus-sasl-devel | 0:2.1.15-15 |
| Red Hat Enterprise Linux 3 | cyrus-sasl-gssapi | 0:2.1.15-15 |
| Red Hat Enterprise Linux 3 | cyrus-sasl-md5 | 0:2.1.15-15 |
| Red Hat Enterprise Linux 3 | cyrus-sasl-plain | 0:2.1.15-15 |
| Red Hat Enterprise Linux 4 | cyrus-sasl | 0:2.1.19-14 |
| Red Hat Enterprise Linux 4 | cyrus-sasl-debuginfo | 0:2.1.19-14 |
| Red Hat Enterprise Linux 4 | cyrus-sasl-devel | 0:2.1.19-14 |
| Red Hat Enterprise Linux 4 | cyrus-sasl-gssapi | 0:2.1.19-14 |
| Red Hat Enterprise Linux 4 | cyrus-sasl-md5 | 0:2.1.19-14 |
| Red Hat Enterprise Linux 4 | cyrus-sasl-ntlm | 0:2.1.19-14 |
| Red Hat Enterprise Linux 4 | cyrus-sasl-plain | 0:2.1.19-14 |
| Red Hat Enterprise Linux 4 | cyrus-sasl-sql | 0:2.1.19-14 |