Security Advisory

CVE-2009-0688

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-05-15 15:00:00
Last updated 2024-08-07 04:40:05
Assigner certcc
State PUBLISHED

Description

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.