Oval Definition:oval:org.mitre.oval:tst:35067
Comment:cyrus-sasl-md5 is earlier than 0:2.1.15-15
Type:rpminfo_testNamespace:linux
Check_Existence:at_least_one_existsCheck:at least one
State Operator:AND
References
Object:oval:org.mitre.oval:obj:14081
State:oval:org.mitre.oval:ste:10139
Referencing Definitions
Definition IDClassTitleLast Modified
oval:org.mitre.oval:def:9861
V
digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.
2013-04-29
BACK