CVE-2005-0373

{"id": "CVE-2005-0373", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-10-07T04:00:00.000", "references": [{"url": "http://www.gentoo.org/security/en/glsa/glsa-200410-05.xml", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.linuxcompatible.org/print42495.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:054", "source": "cve@mitre.org"}, {"url": "http://www.monkey.org/openbsd/archive/ports/0407/msg00265.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/11347", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c.diff?r1=1.170&r2=1.171", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/plugins/digestmd5.c?rev=1.171&content-type=text/x-cvsweb-markup", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17642", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code."}], "lastModified": "2017-07-11T01:32:15.687", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cyrus:sasl:1.5.24:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5B837A3-E1D7-469D-9A2C-1648DB869524"}, {"criteria": "cpe:2.3:a:cyrus:sasl:1.5.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D5319DC-7C56-4661-83A6-6F226DD6804F"}, {"criteria": "cpe:2.3:a:cyrus:sasl:1.5.28:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BFA8CBB-D990-489B-BBA1-72392B45511F"}, {"criteria": "cpe:2.3:a:cyrus:sasl:2.1.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9ABBB175-E5D7-4270-A599-666233B6420B"}, {"criteria": "cpe:2.3:a:cyrus:sasl:2.1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8765C3F-45F4-403A-900C-EDC95476A5DB"}, {"criteria": "cpe:2.3:a:cyrus:sasl:2.1.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BAE912B-3905-40D2-A2A3-34A87B743244"}, {"criteria": "cpe:2.3:a:cyrus:sasl:2.1.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B860C12-E0C6-4365-8199-BDCA7303B549"}, {"criteria": "cpe:2.3:a:cyrus:sasl:2.1.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D836C743-2957-4FE7-A396-E68466B29266"}, {"criteria": "cpe:2.3:a:cyrus:sasl:2.1.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26AC8F82-1FE2-418E-A90B-3011C31274E6"}, {"criteria": "cpe:2.3:a:cyrus:sasl:2.1.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D75CC348-B708-4B44-80AE-98C10B498876"}, {"criteria": "cpe:2.3:a:cyrus:sasl:2.1.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BBB6270-112B-4BC2-A72F-1FD44C7E6DA6"}, {"criteria": "cpe:2.3:a:cyrus:sasl:2.1.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E35EEADE-B717-4851-8D45-60E0F8800E8E"}, {"criteria": "cpe:2.3:a:cyrus:sasl:2.1.18:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "798B1672-529E-4D61-9CE6-A3C362AA3FD7"}, {"criteria": "cpe:2.3:a:cyrus:sasl:2.1.18_r1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD156C94-966C-4EF7-A386-DA5516B77DD2"}, {"criteria": "cpe:2.3:a:openpkg:openpkg:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37042CDE-E4FE-442E-891A-CD84433D36E2"}, {"criteria": "cpe:2.3:a:openpkg:openpkg:2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11F6E348-01DF-4FA4-808E-39A2A7A2B97B"}, {"criteria": "cpe:2.3:a:suse:suse_cvsup:16.1h_36.i586:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C930F134-76A8-4628-8B2E-B06CAC1F32CC"}, {"criteria": "cpe:2.3:o:conectiva:linux:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4007B0D-9606-46BD-866A-7911BEA292BE"}, {"criteria": "cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A35FC777-A34E-4C7B-9E93-8F17F3AD5180"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99C273D1-ADFE-4B4C-B543-7B9CA741A117"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BC31B69-3DE1-4CF3-ADC9-CA0BF1714CBF"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77CC671C-6D89-4279-86F7-DDE1D4D9A0CA"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E4B77F6-E71C-45ED-96CC-7872AD2FCBF8"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "066ABC3B-B395-42D2-95C0-5B810F91A6F0"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01BC19FC-6E03-4000-AE4B-232E47FA76F2"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "421FC2DD-0CF7-44A2-A63C-5221689E2363"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F8B70BC-42B7-453A-B506-7BE69D49A4B5"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FAAC6EA5-DCB2-4A50-A8BC-25CC43FAEF9B"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA32F7D8-02F8-4CFE-B193-2888807BC4D6"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9DCDE70-07DA-4F0B-805F-6BA03D410CD6"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDCF4FB3-F781-46D5-BEE7-485B3DC78B83"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE52A344-8B07-480D-A57F-B1F6E6574F3B"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56CC0444-570C-4BB5-B53A-C5CA0BD87935"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62E3EED7-FE30-4620-B40B-9CC49B77408A"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5AFD8BC6-4893-4D9D-A26E-27AAC864F94B"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BD1F9A1-5ADB-451D-9525-D545E42D2B8F"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7A24978-2891-425C-ACF6-E8F5C839C54A"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B20E130-6078-4336-B614-273C27142B46"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB461678-560D-436E-A3AE-9E1E16DB0412"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFDADE04-29F0-446B-824B-0518880CF0A0"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ED9BE602-A740-4CF7-9CAF-59061B16AB31"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33E698C1-C313-40E6-BAF9-7C8F9CF02484"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF2D00AC-FA2A-4C39-B796-DC19072862CF"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "421079DA-B605-4E05-9454-C30CF7631CF4"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93B734BA-3435-40A9-B22B-5D56CEB865A7"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4B57B3E-B1B2-4F13-99D3-4F9DB3C07B5E"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.3.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30897327-44DD-4D6C-B8B6-2D66C44EA55D"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:10.3.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B79D8F73-2E78-4A67-96BB-21AD9BCB0094"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB279593-17D1-4A65-BF54-969B38B74B23"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80F5B731-D5A7-4694-9B27-CEE1DCC810EC"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D5DB7BE-FC71-4ADE-8B9F-7EA401C8CA88"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3E2571E-D9EB-43CD-82DD-8C813FF8D5E5"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36F4618C-1408-4097-B97D-5F32DE6D01DF"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5F558C40-D0DA-4700-95DA-DF1322C020E6"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64F8F30B-E4B8-4745-AFFA-8FD620E61994"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00AE033B-5F16-4262-A397-02D7450189B8"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E831F3E-A980-47AF-BD05-2DB1A14689B4"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36991737-904F-4B26-AEE2-7B30411279E8"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7EE6036-1A18-43F1-8A92-7DF39E1516E3"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "620ECFC8-293D-4C2B-9698-67185BB6E2EF"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1F14A45-BDDB-4C12-9370-D5241975A928"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46BC34D4-A1E8-4E01-982D-EAF03A0EB886"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35932546-B614-47C0-98E6-8EF1EFE06725"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38F17066-C090-4DD7-A1AC-D8FF70D268CE"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E997653-C744-4F1F-9948-47579AB3BED3"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF5A416A-F198-4B9C-8221-D36CC8A7FE5C"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "384C130F-D1A9-4482-AF20-FC81933473A3"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8BCD1C5-1AFC-4287-9AFD-81FB3F4F9E54"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CA6BD2A-3022-408D-8E4F-50865996E965"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "463D5628-7536-4029-99D6-5E525050059E"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69A39B11-1C23-4A6C-B4C5-AEC40836F173"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78D48FD1-CB91-4310-9432-A4365FA67B11"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:10.3.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "750C6C37-8460-4ED8-83AD-ACAF993E4A6E"}, {"criteria": "cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C84296C-2C8A-4DCD-9751-52951F8BEA9F"}, {"criteria": "cpe:2.3:o:suse:suse_linux:1.0:*:desktop:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7EAAD04-D7C4-43DE-B488-1AAD014B503E"}, {"criteria": "cpe:2.3:o:suse:suse_linux:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28CD54FE-D682-4063-B7C3-8B29B26B39AD"}, {"criteria": "cpe:2.3:o:suse:suse_linux:8.0:*:i386:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37F124FE-15F1-49D7-9E03-8E036CE1A20C"}, {"criteria": "cpe:2.3:o:suse:suse_linux:8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F8C55338-3372-413F-82E3-E1B476D6F41A"}, {"criteria": "cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1EFB33BF-F6A5-48C1-AEB5-194FCBCFC958"}, {"criteria": "cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB0E2D3B-B50A-46C2-BA1E-3E014DE91954"}, {"criteria": "cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7446746-87B7-4BD3-AABF-1E0FAA8265AB"}, {"criteria": "cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56EF103F-5668-4754-A83B-D3662D0CE815"}, {"criteria": "cpe:2.3:o:suse:suse_linux:9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFABFCE5-4F86-4AE8-9849-BC360AC72098"}, {"criteria": "cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5F98B9A-880E-45F0-8C16-12B22970F0D1"}, {"criteria": "cpe:2.3:o:suse:suse_linux:9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CFF36BC6-6CCD-4FEE-A120-5B8C4BF5620C"}, {"criteria": "cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B905C6E9-5058-4FD7-95B6-CD6AB6B2F516"}], "operator": "OR"}]}], "vendorComments": [{"comment": "Not vulnerable. This issue did not affect the versions of Cyrus SASL as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.", "lastModified": "2006-08-30T00:00:00", "organization": "Red Hat"}], "sourceIdentifier": "cve@mitre.org"}