openSUSE Security Update : cyrus-sasl (cyrus-sasl-880)

This update of cyrus-sasl improves the output of function saslencode64 by appending a 0 for string termination. The impact depends on the application that uses saslencode64. CVE-2009-0688 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : evolution-data-server (evolution-data-server-782)

camel's NTLM SASL authentication mechanism as used by evolution did not properly validate server's challenge packets CVE-2009-0582. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : cyrus-sasl (cyrus-sasl-880)

This update of cyrus-sasl improves the output of function saslencode64 by appending a 0 for string termination. The impact depends on the application that uses saslencode64. CVE-2009-0688 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : evolution (evolution-776)

camel's NTLM SASL authentication mechanism as used by evolution did not properly validate server's challenge packets CVE-2009-0582. This update also includes the following non-security fixes : - Fixes a critical crasher in mailer component. - Fixes creation of recurrence monthly items in GroupWis...

GLSA-200907-09 : Cyrus-SASL: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-09 Cyrus-SASL: Execution of arbitrary code James Ralston reported that in certain situations, Cyrus-SASL does not properly terminate strings which can result in buffer overflows when performing Base64 encoding. Impact : A...

Cyrus-SASL: Execution of arbitrary code

Background Cyrus-SASL is an implementation of the Simple Authentication and Security Layer. Description James Ralston reported that in certain situations, Cyrus-SASL does not properly terminate strings which can result in buffer overflows when performing Base64 encoding. Impact A remote...

Ubuntu: Security Advisory (USN-790-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-790-1: Cyrus SASL vulnerability

James Ralston discovered that the Cyrus SASL base64 encoding function could be used unsafely. If a remote attacker sent a specially crafted request to a service that used SASL, it could lead to a loss of privacy, or crash the application, resulting in a denial of service...

RedHat Security Advisory RHSA-2009:1116

The remote host is missing updates announced in advisory RHSA-2009:1116. The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support. It was discovered that the Cyrus SASL library cyrus-sasl does not always reliably terminate output from the saslencode...

RedHat Security Advisory RHSA-2009:1116

The remote host is missing updates announced in advisory RHSA-2009:1116. The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support. It was discovered that the Cyrus SASL library cyrus-sasl does not always reliably terminate output from the saslencode...

Important: Red Hat Security Advisory: cyrus-imapd security update

Updated cyrus-imapd packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNT...

cyrus-sasl: sasl_encode64() does not reliably null-terminate its output

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via strings that are used as input to the saslencode64 function in lib/saslutil.c...

Mandrake Security Advisory MDVSA-2009:113 (cyrus-sasl)

The remote host is missing an update to cyrus-sasl announced via advisory MDVSA-2009:113. OpenVAS Vulnerability Test $Id: mdksa2009113.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:113 cyrus-sasl Authors: Thomas Reinke Copyright: Copyright c 2009...

Mandrake Security Advisory MDVSA-2009:113 (cyrus-sasl)

The remote host is missing an update to cyrus-sasl announced via advisory MDVSA-2009:113. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

DSA-1807-1 cyrus-sasl2 cyrus-sasl2-heimdal - arbitrary code execution

Bulletin has no description...

Cyrus SASL Library Version Detection

This script detects the installed version of Cyrus SASL Library and sets the result in KB. OpenVAS Vulnerability Test $Id: secpodcyrussasllibdetect.nasl 7823 2017-11-20 08:54:04Z cfischer $ Cyrus SASL Library Version Detection Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...

openSUSE 10 Security Update : cyrus-sasl (cyrus-sasl-6249)

This update of cyrus-sasl improves the output of function saslencode64 by appending a 0 for string termination. The impact depends on the application that uses saslencode64. CVE-2009-0688 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

Cyrus SASL Remote Buffer Overflow Vulnerability

This host has installed Cyrus SASL library and is prone to Remote Buffer Overflow vulnerability SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: cyrus-sasl

The remote host is missing an update to the system as announced in the referenced advisory. VID 14ab174c-40ef-11de-9fd5-001bd3385381 OpenVAS Vulnerability Test $ Description: Auto generated from VID 14ab174c-40ef-11de-9fd5-001bd3385381 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: cyrus-sasl

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...