Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD14AB174C-40EF-11DE-9FD5-001BD3385381
HistoryApr 08, 2009 - 12:00 a.m.

cyrus-sasl -- buffer overflow vulnerability

2009-04-0800:00:00
vuxml.freebsd.org
16

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.407

Percentile

97.3%

JSON

US-CERT reports:

The sasl_encode64() function converts a string into
base64. The Cyrus SASL library contains buffer overflows
that occur because of unsafe use of the sasl_encode64()
function.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchcyrus-sasl< 2.1.23UNKNOWN

Related

debian 1
openvas 38
centos 1
nessus 26
nvd 1
gentoo 1
oraclelinux 1
prion 1
cert 1
veracode 1
ubuntucve 1
redhat 1
cvelist 1
slackware 1
ubuntu 1
debiancve 1
f5 2
cve 1
securityvulns 1
oracle 1
threatpost 1
debian
debian
[SECURITY] [DSA 1807-1] New cyrus-sasl2/cyrus-sasl2-heimdal packages fix arbitrary code execution
2009-06-01 12:42:10
openvas
openvas
Gentoo Security Advisory GLSA 200907-09 (cyrus-sasl)
2009-07-29 00:00:00
CentOS Update for cyrus-imapd CESA-2009:1116 centos5 i386
2011-08-09 00:00:00
CentOS Security Advisory CESA-2009:1116 (cyrus-imapd)
2009-06-23 00:00:00
centos
centos
cyrus security update
2009-06-19 09:47:45
nessus
nessus
Slackware 10.2 / 11.0 / 12.0 / 12.1 / 12.2 / current : cyrus-sasl (SSA:2009-134-01)
2009-05-15 00:00:00
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : cyrus-sasl2 vulnerability (USN-790-1)
2009-06-25 00:00:00
FreeBSD : cyrus-sasl -- buffer overflow vulnerability (14ab174c-40ef-11de-9fd5-001bd3385381)
2009-05-15 00:00:00
nvd
nvd
CVE-2009-0688
2009-05-15 15:30:00
gentoo
gentoo
Cyrus-SASL: Execution of arbitrary code
2009-07-12 00:00:00
oraclelinux
oraclelinux
cyrus-imapd security update
2009-06-18 00:00:00
prion
prion
Buffer overflow
2009-05-15 15:30:00
cert
cert
Cyrus SASL library buffer overflow vulnerability
2009-05-14 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:34:33
ubuntucve
ubuntucve
CVE-2009-0688
2009-05-15 00:00:00
redhat
redhat
(RHSA-2009:1116) Important: cyrus-imapd security update
2009-06-18 00:00:00
cvelist
cvelist
CVE-2009-0688
2009-05-15 15:00:00
slackware
slackware
cyrus-sasl
2009-05-14 17:07:08
ubuntu
ubuntu
Cyrus SASL vulnerability
2009-06-24 00:00:00
debiancve
debiancve
CVE-2009-0688
2009-05-15 15:30:00
f5
f5
K15652 : SASL vulnerability CVE-2009-0688
2014-10-02 00:00:00
SOL15652 - SASL vulnerability CVE-2009-0688
2014-10-02 00:00:00
cve
cve
CVE-2009-0688
2009-05-15 15:30:00
securityvulns
securityvulns
Oracle / Sun applications multiple security ulnerabilities
2010-04-17 00:00:00
oracle
oracle
Security | Oracle Critical Patch Update - April 2010
2010-04-13 00:00:00
threatpost
threatpost
Apple Mega Patch Covers 88 Mac OS X Vulnerabilities
2010-03-29 17:15:44

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.407

Percentile

97.3%

JSON
Related for 14AB174C-40EF-11DE-9FD5-001BD3385381
debian1openvas38centos1nessus26nvd1gentoo1oraclelinux1prion1cert1veracode1ubuntucve1redhat1cvelist1slackware1ubuntu1debiancve1f52cve1securityvulns1oracle1threatpost1