CVE-2006-1721

Published: Apr 11, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

Affected (5)

Products: Cyrus: Sasl

Cyrus

1 product

Sasl

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Cyrus Sasl	Version 2.1.18
Cyrus Sasl	Version 2.1.18_r1
Cyrus Sasl	Version 2.1.18_r2
Cyrus Sasl	Version 2.1.19
Cyrus Sasl	Version 2.1.20

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (68)

ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc (unsafe URL)

Source: cve@mitre.org

http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&msg=7775

Source: cve@mitre.org

http://labs.musecurity.com/advisories/MU-200604-01.txt

Source: cve@mitre.org

Patch

http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044992.html

Source: cve@mitre.org

http://secunia.com/advisories/19618

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/19753

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19809

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19825

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/19964

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20014

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/22187

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26708

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26857

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27237

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/30535

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016960

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2007-426.htm

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1042

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200604-09.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:073

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_05_05.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0795.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0878.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/493080/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17446

Source: cve@mitre.org

Patch

http://www.trustix.org/errata/2006/0024

Source: cve@mitre.org

http://www.vmware.com/security/advisories/VMSA-2008-0009.html

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1306

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/3852

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2008/1744

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/25738

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9861

Source: cve@mitre.org

https://usn.ubuntu.com/272-1/

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc (unsafe URL)