Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 494
Alerts This Week
Warning Icon 1 494

Gentoo: 200604-09 Normal: Cyrus-SASL DIGEST-MD5 DoS Advisory

gentoo
Calendar Grey April 21, 2006
Scroller Gentoo
Cyrus-SASL exhibits a weakness in the DIGEST-MD5 mechanism resulting in a moderate severity Denial of Service vulnerability. It is advisable to upgrade.
Cyrus-SASL contains a vulnerability in the DIGEST-MD5 process that could lead to a Denial of Service.

Summary

Gentoo Linux Security Advisory GLSA 200604-09 https://security.gentoo.org/ Severity: Normal Title: Cyrus-SASL: DIGEST-MD5 Pre-Authentication Denial of Service Date: April 21, 2006 Bugs: #129523 ID: 200604-09

Synopsis ======= Cyrus-SASL contains a vulnerability in the DIGEST-MD5 process that could lead to a Denial of Service.
Background ========= Cyrus-SASL is an implementation of the Simple Authentication and Security Layer.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-libs/cyrus-sasl < 2.1.21-r2 >= 2.1.21-r2
========== Cyrus-SASL contains an unspecified vulnerability in the DIGEST-MD5 process that could lead to a Denial of Service.
Impact ===== An attacker...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service gentoo advisory cyrus-sasl normal severity digestion-md5

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory denial of service gentoo advisory cyrus-sasl normal severity digestion-md5

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround