CVEDB API

Vulnerability Details CVE-2009-0688

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.314

EPSS Ranking 96.5%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2009-0688

Carnegie Mellon University » Cyrus-Sasl » Version: Any

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:*
Carnegie Mellon University » Cyrus-Sasl » Version: 1.4.1

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.4.1
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.0

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.0
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.10

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.10
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.11

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.11
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.13

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.13
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.15

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.15
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.16

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.16
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.2

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.2
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.20

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.20
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.21

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.21
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.22

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.22
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.23

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.23
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.24

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.24
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.26

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.26
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.27

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.27
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.28

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.28
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.3

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.3
Carnegie Mellon University » Cyrus-Sasl » Version: 1.5.5

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:1.5.5
Carnegie Mellon University » Cyrus-Sasl » Version: 2.0.0

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.0
Carnegie Mellon University » Cyrus-Sasl » Version: 2.0.1

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.1
Carnegie Mellon University » Cyrus-Sasl » Version: 2.0.2

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.2
Carnegie Mellon University » Cyrus-Sasl » Version: 2.0.3

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.3
Carnegie Mellon University » Cyrus-Sasl » Version: 2.0.4

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.4
Carnegie Mellon University » Cyrus-Sasl » Version: 2.0.5

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.0.5
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.0

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.0
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.1

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.1
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.10

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.10
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.11

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.11
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.12

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.12
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.13

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.13
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.14

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.14
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.15

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.15
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.16

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.16
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.17

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.17
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.18

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.18
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.19

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.19
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.2

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.2
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.20

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.20
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.21

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.21
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.3

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.3
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.5

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.5
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.6

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.6
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.7

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.7
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.8

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.8
Carnegie Mellon University » Cyrus-Sasl » Version: 2.1.9

cpe:2.3:a:carnegie_mellon_university:cyrus-sasl:2.1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0688

Products

Pricing

Contact Us