CVE-2009-0688
- State
- Published
- Severity
- Not scored
- Published
- May 15, 2009
- Updated
- Aug 7, 2024
- Reserved
- Feb 22, 2009
Description
Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 54515vdb-entry
- 35239third-party-advisory
- TA10-103Bthird-party-advisory
- 35321third-party-advisory
- VU#238019third-party-advisory
- 35497third-party-advisory
- 35102third-party-advisory
- SSA:2009-134-01vendor-advisory
- 35746third-party-advisory
- 39428third-party-advisory
- 1020755vendor-advisory
- 35094third-party-advisory
- APPLE-SA-2010-03-29-1vendor-advisory
- DSA-1807vendor-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2009-0091
- oval:org.mitre.oval:def:6136vdb-entrysignature
- 35097third-party-advisory
- ADV-2009-1313vdb-entry
- ADV-2009-2012vdb-entry
- oval:org.mitre.oval:def:10687vdb-entrysignature
- SUSE-SR:2009:011vendor-advisory
- 1021699vendor-advisory
- GLSA-200907-09vendor-advisory
- http://support.apple.com/kb/HT4077
- http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html
- http://support.avaya.com/elmodocs2/security/ASA-2009-184.htm
- 264248vendor-advisory
- 35206third-party-advisory
- 259148vendor-advisory
- MDVSA-2009:113vendor-advisory
- RHSA-2009:1116vendor-advisory
- 34961vdb-entry
- 35416third-party-advisory
- 273910vendor-advisory
- 54514vdb-entry
- USN-790-1vendor-advisory
- 1022231vdb-entry
- solaris-sasl-saslencode64-bo(50554)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.