9.8
CVE-2002-1347
- EPSS 7.08%
- Veröffentlicht 18.12.2002 05:00:00
- Zuletzt bearbeitet 16.06.2026 21:59:08
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs during user name canonicalization, (2) characters that need to be escaped during LDAP authentication using saslauthd, or (3) an off-by-one error in the log writer, which does not allocate space for the null character that terminates a string.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cyrusimap ≫ Cyrus Sasl Version <= 2.1.9
Apple ≫ macOS X Server Version < 10.3.8
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.08% | 0.934 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-131 Incorrect Calculation of Buffer Size
The product does not correctly calculate the size to be used when allocating a buffer, which could lead to a buffer overflow.
http://archives.neohapsis.com/archives/linux/suse/2002-q4/1275.html
http://distro.conectiva.com/atualizacoes/?id=a&anuncio=000557
http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
http://marc.info/?l=bugtraq&m=103946297703402&w=2
http://www.debian.org/security/2002/dsa-215
http://www.redhat.com/support/errata/RHSA-2002-283.html
http://www.securityfocus.com/advisories/4826
http://www.securityfocus.com/bid/6347
http://www.securityfocus.com/bid/6348
http://www.securityfocus.com/bid/6349
https://exchange.xforce.ibmcloud.com/vulnerabilities/10810
https://exchange.xforce.ibmcloud.com/vulnerabilities/10811
https://exchange.xforce.ibmcloud.com/vulnerabilities/10812