CVE-2000-0956

MEDIUM 4.6CVE-2000-0956 · Published 19/12/2000 · updated 23/09/2026

In short

CVE-2000-0956 is a MEDIUM (CVSS 4.6) vulnerability affecting cyrus-sasl (carnegie mellon university).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cyrus-sasl carnegie_mellon_university	`= 1.5.24`	No fix yet

Description

cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions.

References

redhat.com/support/errata/RHSA-2000-094.html · Patch
securityfocus.com/bid/1875 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/5427

More vulnerabilities in cyrus-sasl

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free