CVE-2006-1721: Input Validation
Published Apr 11, 2006
·Updated
digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.
Affected Software
5 affected components
Cyrus SASL=2.1.18_r1
Cyrus SASL=2.1.19
Cyrus SASL=2.1.18
Cyrus SASL=2.1.18_r2
Cyrus SASL=2.1.20
Remediation
Patch Available
Patch Available
Patch Available
Event History
Apr 11, 2006
CVE Published
11:02 PM
Apr 12, 2006
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1721?
CVE-2006-1721 has been classified as a potential denial of service vulnerability.
2
How do I fix CVE-2006-1721?
To fix CVE-2006-1721, update the CMU Cyrus SASL library to version 2.1.21 or later.
3
What versions of CMU Cyrus SASL are affected by CVE-2006-1721?
CVE-2006-1721 affects CMU Cyrus SASL versions 2.1.18, 2.1.19, 2.1.20, and earlier versions before 2.1.21.
4
Can CVE-2006-1721 be exploited remotely?
Yes, CVE-2006-1721 can be exploited by remote unauthenticated attackers.
5
What is the impact of CVE-2006-1721?
The impact of CVE-2006-1721 is a segmentation fault that leads to a denial of service condition.