Lucene search

K
cve[email protected]CVE-2006-1721
HistoryApr 11, 2006 - 11:02 p.m.

CVE-2006-1721

2006-04-1123:02:00
CWE-20
web.nvd.nist.gov
42
cve-2006-1721
cmu cyrus
sasl library
denial of service
remote attack

6.4 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.073 Low

EPSS

Percentile

94.0%

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

References

6.4 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:N/A:P

0.073 Low

EPSS

Percentile

94.0%