CVE-2006-1721

CVE-2006-1721 affects the Cyrus-SASL library (SASL) 2.1.18 and possibly earlier versions prior to 2.1.21. The vulnerability arises in the DIGEST-MD5 authentication negotiation, where malformed inputs can allow a remote unauthenticated attacker to trigger a denial of service (segmentation fault) o...

CVE-2006-1721

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer SASL library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service segmentation fault via malformed inputs in DIGEST-MD5 negotiation...

CVE-2006-1721: Improper Input Validation

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer SASL library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service segmentation fault via malformed inputs in DIGEST-MD5 negotiation...

cyrus-sasl -- DIGEST-MD5 Pre-Authentication Denial of Service

Unspecified vulnerability in the CMU Cyrus Simple Authentication and Security Layer SASL library, has unknown impact and remote unauthenticated attack vectors, related to DIGEST-MD5 negotiation...

[Full-disclosure] [MU-200604-01] Cyrus SASL DIGEST-MD5 Pre-Authentication Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cyrus SASL DIGEST-MD5 Pre-Authentication Denial of Service MU-200604-01 April 7, 2006 http://labs.musecurity.com/advisories.html Affected Product/Versions: cyrus-sasl-2.1.18 Product Overview: SASL Simple Authentication Security Layer is an Internet...

Cyrus SASL library DoS

DoS on DIGEST-MD5 authentication...

Code injection

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329

CVE-2006-1329 affects the Jabberd server used with Jabber Studio. The vulnerability is in the SASL negotiation: a remote attacker can trigger a denial of service by sending a lack of proper authentication flow, causing a segfault in the c2s path when a response stanza is received before auth. The...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

CVE-2006-1329: Undefined Security Weakness

The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service "c2s segfault" by sending a "response stanza before an auth stanza"...

jabberd instant messaging server DoS

Crash on malformed SASL request...

jabberd -- SASL Negotiation Denial of Service Vulnerability

Secunia reports: A vulnerability has been reported in jabberd, which can be exploited by malicious people to cause a DoS Denial of Service. The vulnerability is caused due to an error within the handling of SASL negotiation. This can be exploited to cause a crash by sending a "response" stanza...

[SA19281] jabberd SASL Negotiation Denial of Service Vulnerability

TITLE: jabberd SASL Negotiation Denial of Service Vulnerability SECUNIA ADVISORY ID: SA19281 VERIFY ADVISORY: http://secunia.com/advisories/19281/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: jabberd 2.x http://secunia.com/product/2730/ DESCRIPTION: A vulnerability has...

Ubuntu 4.10 : cyrus21-imapd vulnerability (USN-37-1)

Recently another buffer overflow has been discovered in the SASL authentication module of the Cyrus IMAP server. An off-by-one comparison error in the mysaslcanonuser function could lead to a missing termination of an user name string. This vulnerability could allow remote, attacker-supplied...

CVE-2005-3567

slapd daemon in IBM Tivoli Directory Server ITDS 5.2.0 and 6.0.0 binds using SASL EXTERNAL, which allows attackers to bypass authentication and modify and delete directory data via unknown attack vectors...

CVE-2002-2043

CVE-2002-2043 affects Cyrus SASL patches for LDAP and MySQL authentication (versions 1.5.24 and 1.5.27). The vulnerability is a SQL injection in the authentication patch that enables remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password. Exploi...

CVE-2002-2043

SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password...