Mission and Overview
Resource Status
NVD contains:

Last updated: 12/28/2014 1:00:20 PM

CVE Publication rate: 17.47

Email List


Workload Index
Vulnerability Workload Index: 7.1
About Us

National Cyber Awareness System

Vulnerability Summary for CVE-2006-1721

Original release date: 04/11/2006
Last revised: 03/07/2011


digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.


CVSS Severity (version 2.0):
Impact Subscore: 2.9
Exploitability Subscore: 4.9
CVSS Version 2 Metrics:
Access Vector: Network exploitable
Access Complexity: High
Authentication: Not required to exploit
Impact Type: Allows disruption of service

References to Advisories, Solutions, and Tools


External Source: CONFIRM
Name: http://www.vmware.com/security/advisories/VMSA-2008-0009.html
External Source: DEBIAN
Name: DSA-1042
External Source: SECUNIA
Name: 26857
Type: Advisory
External Source: SUSE
Name: SUSE-SA:2006:025
External Source: SECUNIA
Name: 19618
Type: Advisory; Patch Information
External Source: CONFIRM
Name: http://support.avaya.com/elmodocs2/security/ASA-2007-426.htm
External Source: VUPEN
Name: ADV-2006-1306
Type: Advisory
External Source: VUPEN
Name: ADV-2006-3852
Type: Advisory
External Source: CONFIRM
Name: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&msg=7775
External Source: SECUNIA
Name: 20014
Type: Advisory
External Source: MISC
Name: http://labs.musecurity.com/advisories/MU-200604-01.txt
Type: Patch Information
External Source: BUGTRAQ
External Source: UBUNTU
Name: USN-272-1
External Source: OVAL
Name: oval:org.mitre.oval:def:9861
External Source: REDHAT
Name: RHSA-2007:0795
External Source: MANDRIVA
Name: MDKSA-2006:073
External Source: SECTRACK
Name: 1016960
External Source: SECUNIA
Name: 19964
Type: Advisory
External Source: REDHAT
Name: RHSA-2007:0878
External Source: SECUNIA
Name: 30535
Type: Advisory
External Source: SGI
Name: 20070901-01-P
External Source: SECUNIA
Name: 22187
Type: Advisory
External Source: BID
Name: 17446
Type: Patch Information
External Source: APPLE
Name: APPLE-SA-2006-09-29
External Source: SECUNIA
Name: 26708
Type: Advisory
External Source: FULLDISC
Name: 20060410 [MU-200604-01] Cyrus SASL DIGEST-MD5 Pre-Authentication Denial of Service
External Source: SECUNIA
Name: 19809
Type: Advisory
External Source: SECUNIA
Name: 19825
Type: Advisory
External Source: XF
Name: cyrus-sasl-digest-dos(25738)
External Source: SECUNIA
Name: 19753
Type: Advisory
External Source: VUPEN
Name: ADV-2008-1744
Type: Advisory
External Source: GENTOO
Name: GLSA-200604-09
External Source: SECUNIA
Name: 27237
Type: Advisory
External Source: TRUSTIX
Name: 2006-0024

References to Check Content

Identifier: oval:org.mitre.oval:def:9861

Technical Details

Vulnerability Type (View All)