Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2009-0688

cyrus-sasl: sasl_encode64() does not reliably null-terminate its output

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.

CVSS 2.0 · 7.5 High EPSS 8.2% KEV · Not listed
Vendors
Carnegie Mellon University Redhat
Products
Cyrus-sasl Enterprise Linux
CVE-2000-0956

security flaw

cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Carnegie Mellon University
Products
Cyrus-sasl