| Package | Affected versions | Patched versions |
|---|---|---|
| sasl | = 1.5.24= 1.5.27= 1.5.28= 2.1.10= 2.1.11= 2.1.12= 2.1.13= 2.1.14= 2.1.15= 2.1.16= 2.1.17= 2.1.18= 2.1.18_r1= 2.1.9 | |
| openpkg | = 2.1= 2.2 | |
| suse cvsup | = 16.1h_36.i586 |
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free