Carnegie Mellon University Cyrus Sasl vulnerabilities

2 vulnerabilities

Known vulnerabilities in Carnegie Mellon University Cyrus Sasl, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.6CVE-2000-0956carnegie_mellon_universitycyrus-sasl
EPSS score
0.39%
cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions.7.5CVE-2009-0688carnegie_mellon_universitycyrus-sasl+10
EPSS score
8.21%
Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.