CVE

Id
5731  
CVE No.
CVE-2002-1347  
Status
Candidate  
Description
Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string.  
Phase
Modified (20071017)  
Votes
ACCEPT(3) Cole, Cox, Green  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
31727 5731 CVE-2002-1347 BUGTRAQ:20021209 Cyrus SASL library buffer overflows  View
31728 5731 CVE-2002-1347 URL:http://marc.info/?l=bugtraq&m=103946297703402&w=2  View
31729 5731 CVE-2002-1347 APPLE:APPLE-SA-2005-03-21  View
31730 5731 CVE-2002-1347 URL:http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html  View
31731 5731 CVE-2002-1347 CONECTIVA:000557  View
31732 5731 CVE-2002-1347 URL:http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557  View
31733 5731 CVE-2002-1347 DEBIAN:DSA-215  View
31734 5731 CVE-2002-1347 URL:http://www.debian.org/security/2002/dsa-215  View
31735 5731 CVE-2002-1347 GENTOO:200212-10  View
31736 5731 CVE-2002-1347 URL:http://www.securityfocus.com/advisories/4826  View
31737 5731 CVE-2002-1347 REDHAT:RHSA-2002:283  View
31738 5731 CVE-2002-1347 URL:http://www.redhat.com/support/errata/RHSA-2002-283.html  View
31739 5731 CVE-2002-1347 SUSE:SuSE-SA:2002:048  View
31740 5731 CVE-2002-1347 URL:http://archives.neohapsis.com/archives/linux/suse/2002-q4/1275.html  View
31741 5731 CVE-2002-1347 BID:6347  View
31742 5731 CVE-2002-1347 URL:http://www.securityfocus.com/bid/6347  View
31743 5731 CVE-2002-1347 BID:6348  View
31744 5731 CVE-2002-1347 URL:http://www.securityfocus.com/bid/6348  View
31745 5731 CVE-2002-1347 BID:6349  View
31746 5731 CVE-2002-1347 URL:http://www.securityfocus.com/bid/6349  View
31747 5731 CVE-2002-1347 XF:cyrus-sasl-username-bo(10810)  View
31748 5731 CVE-2002-1347 URL:http://xforce.iss.net/xforce/xfdb/10810  View
31749 5731 CVE-2002-1347 XF:cyrus-sasl-saslauthd-bo(10811)  View
31750 5731 CVE-2002-1347 URL:http://xforce.iss.net/xforce/xfdb/10811  View
31751 5731 CVE-2002-1347 XF:cyrus-sasl-logwriter-bo(10812)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63982 JVNDB-2002-000309 Cyrus-SASL におけるユーザ名の文字列長検査におけるヒープオーバーフローの脆弱性 Cyrus-SASL には、ユーザ名パラメータの文字列長のチェックを適切に行わない問題のため、ユーザ名に過度に長い文字列を与えられた場合に、ヒープ領域でオーバーフローが発生する脆弱性が存在します。 CVE-2002-1347 5731 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000309.html  View