CVEvulnerability

CVE-2009-0688

7.5 HIGH Published 2009-05-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-05-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.

Affected configurations

• carnegie mellon university cyrus-sasl (<= 2.1.22) • carnegie mellon university cyrus-sasl 1.4.1 • carnegie mellon university cyrus-sasl 1.5.0 • carnegie mellon university cyrus-sasl 1.5.2 • carnegie mellon university cyrus-sasl 1.5.3 • carnegie mellon university cyrus-sasl 1.5.5 • carnegie mellon university cyrus-sasl 1.5.10 • carnegie mellon university cyrus-sasl 1.5.11 • carnegie mellon university cyrus-sasl 1.5.13 • carnegie mellon university cyrus-sasl 1.5.15 • carnegie mellon university cyrus-sasl 1.5.16 • carnegie mellon university cyrus-sasl 1.5.20 • carnegie mellon university cyrus-sasl 1.5.21 • carnegie mellon university cyrus-sasl 1.5.22 • carnegie mellon university cyrus-sasl 1.5.23 • carnegie mellon university cyrus-sasl 1.5.24 • carnegie mellon university cyrus-sasl 1.5.26 • carnegie mellon university cyrus-sasl 1.5.27 • carnegie mellon university cyrus-sasl 1.5.28 • carnegie mellon university cyrus-sasl 2.0.0 • carnegie mellon university cyrus-sasl 2.0.1 • carnegie mellon university cyrus-sasl 2.0.2 • carnegie mellon university cyrus-sasl 2.0.3 • carnegie mellon university cyrus-sasl 2.0.4 • carnegie mellon university cyrus-sasl 2.0.5 • carnegie mellon university cyrus-sasl 2.1.0 • carnegie mellon university cyrus-sasl 2.1.1 • carnegie mellon university cyrus-sasl 2.1.2 • carnegie mellon university cyrus-sasl 2.1.3 • carnegie mellon university cyrus-sasl 2.1.5 • carnegie mellon university cyrus-sasl 2.1.6 • carnegie mellon university cyrus-sasl 2.1.7 • carnegie mellon university cyrus-sasl 2.1.8 • carnegie mellon university cyrus-sasl 2.1.9 • carnegie mellon university cyrus-sasl 2.1.10 • carnegie mellon university cyrus-sasl 2.1.11 • carnegie mellon university cyrus-sasl 2.1.12 • carnegie mellon university cyrus-sasl 2.1.13 • carnegie mellon university cyrus-sasl 2.1.14 • carnegie mellon university cyrus-sasl 2.1.15 • carnegie mellon university cyrus-sasl 2.1.16 • carnegie mellon university cyrus-sasl 2.1.17 • carnegie mellon university cyrus-sasl 2.1.18 • carnegie mellon university cyrus-sasl 2.1.19 • carnegie mellon university cyrus-sasl 2.1.20 • carnegie mellon university cyrus-sasl 2.1.21

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References