French Security Incident Response Team

FrSIRT   

      

   français French  anglais English

 
Vulnerability Notification Service
FrSIRT Private Exploit & PoC Codes Service
FrSIRT Partner Program
14-Day Free Trial
Contact FrSIRT Sales Dept.
 

Security Advisories
Linux Security Advisories
Virus and Threats Advisories
Latest Security News
Latest Zero Day Threats
Security Vulnerabilities and Advisories Search Engine
 

Report a security incident
Report a new vulnerability
Security Mailinglist
 

Our Company
FrSIRT in the News
Advertise on FrSIRT.COM
Security Researchers and Exploit Writers Jobs
Contact Us

Fedora Security Update Fixes Cyrus SASL Remote Denial of Service Vulnerability


Title : Fedora Security Update Fixes Cyrus SASL Remote Denial of Service Vulnerability
Advisory ID : FrSIRT/ADV-2006-1722
CVE ID : CVE-2006-1721
Rated as : Moderate Risk 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2006-05-09

Advisory Details

 
  Description
  Affected Products
  Solution
  References
Technical Description    Receive FrSIRT alerts in a Text format  Receive FrSIRT alerts in a PDF format  Receive FrSIRT alerts in an XML format  Receive FrSIRT notifications by SMS 

Fedora has released updated packages to address a vulnerability identified in Cyrus-SASL [...]

Solution

Upgrade the affected packages :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

300a391df8ef3ed01c3d930bbd8992af80a24a5d SRPMS/cyrus-sasl-2.1.20-6.src.rpm
ae29062ae36281c58bc77df6796a75bab5e1564c ppc/cyrus-sasl-2.1.20-6.ppc.rpm
00d8872c1e9c05e02728d07b1837273fe4d91fec ppc/cyrus-sasl-devel-2.1.20-6.ppc.rpm
0b3d9e7b91939e3e1d9efebf94830d174feab73f ppc/cyrus-sasl-gssapi-2.1.20-6.ppc.rpm
4a0b9ba3d007b7c256061e1dac570721626173e1 ppc/cyrus-sasl-plain-2.1.20-6.ppc.rpm
1e645b2d9d88609c7582cd7757ab6ace7290acc2 ppc/cyrus-sasl-md5-2.1.20-6.ppc.rpm
022c234d85d077e1592c9d63bdcdceef5602bacb ppc/cyrus-sasl-ntlm-2.1.20-6.ppc.rpm
5c5220731335248e2bbb156eb34d339e52aeda0a ppc/cyrus-sasl-sql-2.1.20-6.ppc.rpm
84468cde3141548964f260c1f8c9c117a1925e39 ppc/debug/cyrus-sasl-debuginfo-2.1.20-6.ppc.rpm
b5d12f5ca395bcb0a671e9c2d06c4c824a17f296 x86_64/cyrus-sasl-2.1.20-6.x86_64.rpm
f72d21020e90d8750ec56cdd40ecbbba60d7ff9b x86_64/cyrus-sasl-devel-2.1.20-6.x86_64.rpm
64a2b032fd9a44b8938e735e096ebe71426268a8 x86_64/cyrus-sasl-gssapi-2.1.20-6.x86_64.rpm
6686959043b44986287deda63da87aefcbccd594 x86_64/cyrus-sasl-plain-2.1.20-6.x86_64.rpm
3873fb181eee05e9ca041a28697af0a2c7755564 x86_64/cyrus-sasl-md5-2.1.20-6.x86_64.rpm
afd1e3c8721f86ea5404a632d827058b6fdc2589 x86_64/cyrus-sasl-ntlm-2.1.20-6.x86_64.rpm
75cafe4c5bcb69e42d4248739e2b91c1c3342e90 x86_64/cyrus-sasl-sql-2.1.20-6.x86_64.rpm
9eb024f7973bf7239362c857baed419299f149c3 x86_64/debug/cyrus-sasl-debuginfo-2.1.20-6.x86_64.rpm
62856330d3293bee87015a51da9b8c820385f91d i386/cyrus-sasl-2.1.20-6.i386.rpm
eac481e95c4975fad38c56a81222dec3d0b29135 i386/cyrus-sasl-devel-2.1.20-6.i386.rpm
75af87f7b6342795fea3e02f98cf87a1a1572bd0 i386/cyrus-sasl-gssapi-2.1.20-6.i386.rpm
d5909b7f6be21dc07fa1df918accf5c6fea85458 i386/cyrus-sasl-plain-2.1.20-6.i386.rpm
952e9b5772643a798c4449bc8be97cbaca9aace1 i386/cyrus-sasl-md5-2.1.20-6.i386.rpm
a91ac7685c7f80c028906be5963b48c564ef5927 i386/cyrus-sasl-ntlm-2.1.20-6.i386.rpm
d57aa2bb3d7662cb37f1b0abf968946638c0ac53 i386/cyrus-sasl-sql-2.1.20-6.i386.rpm
7b92aa6172f8fe87e2607e77e607578e0a679470 i386/debug/cyrus-sasl-debuginfo-2.1.20-6.i386.rpm

ChangeLog

2006-05-09 : Initial release

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.


 
 

Search

      

Mailinglist

    
 

Sun Logical Domain Manager Local Privilege Escalation Vulnerability

Sun StarOffice/StarSuite EMF Handling Buffer Overflow Vulnerability

Sun Java Messaging Server Cross Site Scripting Vulnerability

Sun Solaris IP Filter NAT Service DNS Cache Poisoning Vulnerability

Sun Java System Identity Manager Security Bypass Vulnerabilities

Sun Solaris DHCP Buffer Overflow and Denial of Service

Sun Solstice X.25 "/dev/xty" Local Denial of Service Vulnerability

Mozilla Products Code Execution and Security Bypass Vulnerabilities

Mozilla Firefox Shortcut Handlingg Information Disclosure Vulnerability

Mozilla Products Code Execution and Security Bypass Vulnerabilities

Mozilla Firefox for Mac OS X GIF Rendering Code Execution Vulnerability

Mozilla Products Remote Code Execution and Security Bypass Issues

Mozilla Products Code Execution and Injection Vulnerabilities

Mozilla JavaScript Garbage Collector Code Execution Vulnerability

Microsoft XML Core Services Multiple Remote Vulnerabilities (MS08-069)

Microsoft Windows SMB Credential Reflection Vulnerability (MS08-068)

Microsoft Windows Server Service Vulnerability (MS08-067)

Microsoft Windows "afd.sys" Privilege Escalation Vulnerability (MS08-066)

Microsoft Windows MSMQ Code Execution Vulnerability (MS08-065)

Microsoft Windows VADs Privilege Escalation Vulnerability (MS08-064)

Microsoft Windows SMB Code Execution Vulnerability (MS08-063)

Copyright 2003-2008 © FrSIRT.COM - Privacy Policy