Vulnerabilities > CVE-2001-0869

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
caldera
redhat
suse
nessus
NVD
Published: 2001-12-21
Updated: 2024-11-20

Summary

Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.

Vulnerable Configurations

Part Description Count
Application
Caldera
1
Application
Redhat
1
OS
Redhat
2
OS
Suse
4
OS
Caldera
1

Nessus

NASL familyMandriva Local Security Checks
NASL idMANDRAKE_MDKSA-2002-018.NASL
descriptionKari Hurtta discovered that a format bug exists in the Cyrus SASL library, which is used to provide an authentication API for mail clients and servers, as well as other services such as LDAP. The format bug was found in one of the logging functions which could be used by an attacker to obtain access to a machine or to possibly acquire elevated privileges. Thanks to the SuSE security team for providing the fix.
last seen2020-06-01
modified2020-06-02
plugin id13926
published2004-07-31
reporterThis script is Copyright (C) 2004-2019 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/13926
titleMandrake Linux Security Advisory : cyrus-sasl (MDKSA-2002:018)

Redhat

advisories
  • rhsa
    idRHSA-2001:150
  • rhsa
    idRHSA-2001:151

References