CVE-2006-1721

Publication date 11 April 2006

Last updated 24 July 2024

Ubuntu priority

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
cyrus-sasl2	7.04 feisty	Fixed 2.1.19.dfsg1-0.1ubuntu2
	6.10 edgy	Fixed 2.1.19.dfsg1-0.1ubuntu2
	6.06 LTS dapper	Fixed 2.1.19.dfsg1-0.1ubuntu2
cyrus-sasl2-heimdal	7.04 feisty	Not in release
	6.10 edgy	Not in release
	6.06 LTS dapper	Not in release

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-272-1
cyrus-sasl2 vulnerability
24 April 2006

Other references

https://www.cve.org/CVERecord?id=CVE-2006-1721