← Database

CVE-2009-0688

HIGH CVSS: 7.5 Published: 2009-05-15 Modified: 2026-06-16

Description

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.

Affected Platforms

Carnegie Mellon University Cyrus-Sasl

Weakness Type

CWE-119

References