Approved changes feed: RSS · Atom
cpe:2.3:a:cyrus:sasl:1.5.24:*:*:*:*:*:*:*
part: a version: 1.5.24 update: *
| Vendor | Cyrus (398f2f03-5710-57d5-96a2-c3e12b39a20b) |
|---|---|
| Product | Sasl (67a538ac-cc4c-51bc-b981-a369103a56fd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/cyrus-sasl2 |
purl2cpe | 2026-06-01 10:15:33.624131 |
pkg:deb/ubuntu/cyrus-sasl2 |
purl2cpe | 2026-06-01 10:15:33.624132 |
pkg:docker/ibmcom/cyrus-sasl |
purl2cpe | 2026-06-01 10:15:33.624134 |
pkg:github/cyrusimap/cyrus-sasl |
purl2cpe | 2026-06-01 10:15:33.624135 |
pkg:gitlab/redhat/cyrus-sasl |
purl2cpe | 2026-06-01 10:15:33.624137 |
pkg:golang/github.com/cyrusimap/cyrus-sasl |
purl2cpe | 2026-06-01 10:15:33.624138 |
pkg:rpm/fedora/cyrus-sasl |
purl2cpe | 2026-06-01 10:15:33.624140 |
pkg:rpm/opensuse/cyrus-sasl |
purl2cpe | 2026-06-01 10:15:33.624141 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-0373 |
vulnerable | 2026-06-08 04:48:12.478899 |
Details available
Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code.
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-07T21:13:54.116Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0884 |
vulnerable | 2026-06-08 04:47:51.710696 |
Details available
The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.
Published: 2004-10-21T04:00:00.000Z
Updated: 2024-08-08T00:31:47.620Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-2043 |
vulnerable | 2026-06-08 04:47:18.965331 |
Details available
SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password.
Published: 2005-07-14T04:00:00.000Z
Updated: 2024-09-17T00:31:55.073Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.