NVD脆弱性詳細

Exploit、PoC検索

Exploit DB

NVD脆弱性検索トップ

->

NVD脆弱性詳細

CVE-2006-1721

概要	digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.
公表日	2006年4月12日8:02
登録日	2021年1月29日15:35
最終更新日	2018年10月19日1:34

CVSS2.0 : LOW
スコア	2.6
ベクター	AV:N/AC:H/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	高
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1		以上	以下	より上	未満
cpe:2.3:a:cyrus:sasl:2.1.18:::::::*
cpe:2.3:a:cyrus:sasl:2.1.18_r1:::::::*
cpe:2.3:a:cyrus:sasl:2.1.18_r2:::::::*
cpe:2.3:a:cyrus:sasl:2.1.19:::::::*
cpe:2.3:a:cyrus:sasl:2.1.20:::::::*

関連情報、対策とツール

No	URL	refsource	タグ
1	ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc	SGI
2	http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&msg=7775	CONFIRM
3	http://labs.musecurity.com/advisories/MU-200604-01.txt	MISC	Patch
4	http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html	APPLE
5	http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044992.html	FULLDISC
6	http://secunia.com/advisories/19618	SECUNIA	Patch Vendor Advisory
7	http://secunia.com/advisories/19753	SECUNIA	Vendor Advisory
8	http://secunia.com/advisories/19809	SECUNIA	Vendor Advisory
9	http://secunia.com/advisories/19825	SECUNIA	Vendor Advisory
10	http://secunia.com/advisories/19964	SECUNIA	Vendor Advisory
11	http://secunia.com/advisories/20014	SECUNIA	Vendor Advisory
12	http://secunia.com/advisories/22187	SECUNIA	Vendor Advisory
13	http://secunia.com/advisories/26708	SECUNIA	Vendor Advisory
14	http://secunia.com/advisories/26857	SECUNIA	Vendor Advisory
15	http://secunia.com/advisories/27237	SECUNIA	Vendor Advisory
16	http://secunia.com/advisories/30535	SECUNIA	Vendor Advisory
17	http://securitytracker.com/id?1016960	SECTRACK
18	http://support.avaya.com/elmodocs2/security/ASA-2007-426.htm	CONFIRM
19	http://www.debian.org/security/2006/dsa-1042	DEBIAN
20	http://www.gentoo.org/security/en/glsa/glsa-200604-09.xml	GENTOO
21	http://www.mandriva.com/security/advisories?name=MDKSA-2006:073	MANDRIVA
22	http://www.novell.com/linux/security/advisories/2006_05_05.html	SUSE
23	http://www.redhat.com/support/errata/RHSA-2007-0795.html	REDHAT
24	http://www.redhat.com/support/errata/RHSA-2007-0878.html	REDHAT
25	http://www.securityfocus.com/archive/1/493080/100/0/threaded	BUGTRAQ
26	http://www.securityfocus.com/bid/17446	BID	Patch
27	http://www.trustix.org/errata/2006/0024	TRUSTIX
28	http://www.vmware.com/security/advisories/VMSA-2008-0009.html	CONFIRM
29	http://www.vupen.com/english/advisories/2006/1306	VUPEN	Vendor Advisory
30	http://www.vupen.com/english/advisories/2006/3852	VUPEN	Vendor Advisory
31	http://www.vupen.com/english/advisories/2008/1744	VUPEN	Vendor Advisory
32	https://exchange.xforce.ibmcloud.com/vulnerabilities/25738	XF
33	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9861	OVAL
34	https://usn.ubuntu.com/272-1/	UBUNTU

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-20	不適切な入力確認	https://cwe.mitre.org/data/definitions/20.html