Oval Definition:	oval:org.mitre.oval:def:9861
Revision Date: 2013-04-29 Version: 11 Title: digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation. Description: digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2006-1721 Platform(s): CentOS Linux 3 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section cyrus-sasl-plain is earlier than 0:2.1.15-15 OR cyrus-sasl-md5 is earlier than 0:2.1.15-15 OR cyrus-sasl-gssapi is earlier than 0:2.1.15-15 OR cyrus-sasl-devel is earlier than 0:2.1.15-15 OR cyrus-sasl is earlier than 0:2.1.15-15 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section cyrus-sasl-ntlm is earlier than 0:2.1.19-14 OR cyrus-sasl-sql is earlier than 0:2.1.19-14 OR cyrus-sasl-plain is earlier than 0:2.1.19-14 OR cyrus-sasl-md5 is earlier than 0:2.1.19-14 OR cyrus-sasl-gssapi is earlier than 0:2.1.19-14 OR cyrus-sasl-devel is earlier than 0:2.1.19-14 OR cyrus-sasl is earlier than 0:2.1.19-14
BACK