PT-2001-2035 · Cyrus · Cyrus-Sasl

Publicado 2001-12-21 · Atualizado 2018-05-03 · CVE-2001-0869

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions cyrus-sasl (affected versions not specified)

Description A format string vulnerability exists in the default logging callback function sasl syslog in common.c of the Cyrus SASL library. This issue may allow remote attackers to execute arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-0869

Produtos afetados

Cyrus-Sasl

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/7443 · Nota
• http://caldera.com/support/security/advisories/CSSA-2001-040.0.txt · Aviso do Fabricante
• http://securityfocus.com/bid/3498 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0869 · Nota de Segurança
• http://frontal2.mandriva.com/security/advisories?name=MDKSA-2002:018 · Aviso do Fabricante
• http://lwn.net/alerts/SuSE/SuSE-SA%3A2001%3A042.php3 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2001-150.html · Aviso do Fabricante
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000444 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2001-151.html · Aviso do Fabricante
• ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02:15.cyrus-sasl.asc · Aviso do Fabricante