CVE-2005-0373
- State
- Published
- Severity
- Not scored
- Published
- Feb 13, 2005
- Updated
- Aug 7, 2024
- Reserved
- Feb 13, 2005
Description
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SUSE-SR:2005:006vendor-advisory
- MDKSA-2005:054vendor-advisory
- [openbsd-ports] 20040717 UPDATE: cyrus-sasl-2.1.19mailing-list
- https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c?rev=1.171&content-type=text/x-cvsweb-markup
- https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff?r1=1.170&r2=1.171
- 11347vdb-entry
- GLSA-200410-05vendor-advisory
- cyrus-sasl-digestmda5-bo(17642)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.