Cyrus-SASL: DIGEST-MD5 Pre-Authentication Denial of service

Background Cyrus-SASL is an implementation of the Simple Authentication and Security Layer. Description Cyrus-SASL contains an unspecified vulnerability in the DIGEST-MD5 process that could lead to a Denial of Service. Impact An attacker could possibly exploit this vulnerability by sending...

Design/Logic Flaw

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer SASL library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service segmentation fault via malformed inputs in DIGEST-MD5 negotiation...

CVE-2006-1721

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer SASL library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service segmentation fault via malformed inputs in DIGEST-MD5 negotiation...

CVE-2006-1721

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer SASL library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service segmentation fault via malformed inputs in DIGEST-MD5 negotiation...

CVE-2006-1721

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer SASL library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service segmentation fault via malformed inputs in DIGEST-MD5 negotiation...

CVE-2006-1721

CVE-2006-1721 affects the Cyrus-SASL library (SASL) 2.1.18 and possibly earlier versions prior to 2.1.21. The vulnerability arises in the DIGEST-MD5 authentication negotiation, where malformed inputs can allow a remote unauthenticated attacker to trigger a denial of service (segmentation fault) o...

CVE-2006-1721

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer SASL library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service segmentation fault via malformed inputs in DIGEST-MD5 negotiation...

cyrus-sasl -- DIGEST-MD5 Pre-Authentication Denial of Service

Unspecified vulnerability in the CMU Cyrus Simple Authentication and Security Layer SASL library, has unknown impact and remote unauthenticated attack vectors, related to DIGEST-MD5 negotiation...

[Full-disclosure] [MU-200604-01] Cyrus SASL DIGEST-MD5 Pre-Authentication Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cyrus SASL DIGEST-MD5 Pre-Authentication Denial of Service MU-200604-01 April 7, 2006 http://labs.musecurity.com/advisories.html Affected Product/Versions: cyrus-sasl-2.1.18 Product Overview: SASL Simple Authentication Security Layer is an Internet...

Cyrus SASL library DoS

DoS on DIGEST-MD5 authentication...

Code injection

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329

CVE-2006-1329 affects the Jabberd server used with Jabber Studio. The vulnerability is in the SASL negotiation: a remote attacker can trigger a denial of service by sending a lack of proper authentication flow, causing a segfault in the c2s path when a response stanza is received before auth. The...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

jabberd instant messaging server DoS

Crash on malformed SASL request...

jabberd -- SASL Negotiation Denial of Service Vulnerability

Secunia reports: A vulnerability has been reported in jabberd, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to an error within the handling of SASL negotiation. This can be exploited to cause a crash by sending a "response" stanza...

[SA19281] jabberd SASL Negotiation Denial of Service Vulnerability

TITLE: jabberd SASL Negotiation Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19281 VERIFY ADVISORY: http://secunia.com/advisories/19281/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: jabberd 2.x http://secunia.com/product/2730/ DESCRIPTION: A vulnerability has...

Ubuntu 4.10 : cyrus21-imapd vulnerability (USN-37-1)

Recently another buffer overflow has been discovered in the SASL authentication module of the Cyrus IMAP server. An off-by-one comparison error in the mysaslcanonuser function could lead to a missing termination of an user name string. This vulnerability could allow remote, attacker-supplied...