CVE-2005-0373

HIGH 7.5CVE-2005-0373 · Published 07/10/2004 · updated 16/06/2026

Package	Affected versions	Patched versions
sasl cyrus	`= 1.5.24= 1.5.27= 1.5.28= 2.1.10= 2.1.11= 2.1.12= 2.1.13= 2.1.14= 2.1.15= 2.1.16= 2.1.17= 2.1.18= 2.1.18_r1= 2.1.9`	No fix yet
openpkg openpkg	`= 2.1= 2.2`	No fix yet
suse cvsup suse	`= 16.1h_36.i586`	No fix yet

Description

Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.

References

gentoo.org/security/en/glsa/glsa-200410-05.xml · Patch
linuxcompatible.org/print42495.html · Patch
mandriva.com/security/advisories
monkey.org/openbsd/archive/ports/0407/msg00265.html · Patch
securityfocus.com/bid/11347 · Patch
bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff · Vendor Advisory
bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/17642

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free