CVE-2006-1721

N/A Unknown
Published: April 11, 2006 Modified: April 16, 2026
View on NVD

Description

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc
Source: cve@mitre.org
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&msg=7775
Source: cve@mitre.org
http://labs.musecurity.com/advisories/MU-200604-01.txt
Source: cve@mitre.org
Patch
http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html
Source: cve@mitre.org
http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044992.html
Source: cve@mitre.org
http://secunia.com/advisories/19618
Source: cve@mitre.org
Patch Vendor Advisory
http://secunia.com/advisories/19753
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/19809
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/19825
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/19964
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/20014
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/22187
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/26708
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/26857
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/27237
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/30535
Source: cve@mitre.org
Vendor Advisory
http://securitytracker.com/id?1016960
Source: cve@mitre.org
http://support.avaya.com/elmodocs2/security/ASA-2007-426.htm
Source: cve@mitre.org
http://www.debian.org/security/2006/dsa-1042
Source: cve@mitre.org
http://www.gentoo.org/security/en/glsa/glsa-200604-09.xml
Source: cve@mitre.org
http://www.mandriva.com/security/advisories?name=MDKSA-2006:073
Source: cve@mitre.org
http://www.novell.com/linux/security/advisories/2006_05_05.html
Source: cve@mitre.org
http://www.redhat.com/support/errata/RHSA-2007-0795.html
Source: cve@mitre.org
http://www.redhat.com/support/errata/RHSA-2007-0878.html
Source: cve@mitre.org
http://www.securityfocus.com/archive/1/493080/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/17446
Source: cve@mitre.org
Patch
http://www.trustix.org/errata/2006/0024
Source: cve@mitre.org
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2006/1306
Source: cve@mitre.org
Vendor Advisory
http://www.vupen.com/english/advisories/2006/3852
Source: cve@mitre.org
Vendor Advisory
http://www.vupen.com/english/advisories/2008/1744
Source: cve@mitre.org
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25738
Source: cve@mitre.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9861
Source: cve@mitre.org
https://usn.ubuntu.com/272-1/
Source: cve@mitre.org
ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc
Source: af854a3a-2127-422b-91ae-364da2661108
http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&msg=7775
Source: af854a3a-2127-422b-91ae-364da2661108
http://labs.musecurity.com/advisories/MU-200604-01.txt
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044992.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/19618
Source: af854a3a-2127-422b-91ae-364da2661108
Patch Vendor Advisory
http://secunia.com/advisories/19753
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/19809
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/19825
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/19964
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/20014
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/22187
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/26708
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/26857
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/27237
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/30535
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://securitytracker.com/id?1016960
Source: af854a3a-2127-422b-91ae-364da2661108
http://support.avaya.com/elmodocs2/security/ASA-2007-426.htm
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2006/dsa-1042
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.gentoo.org/security/en/glsa/glsa-200604-09.xml
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.mandriva.com/security/advisories?name=MDKSA-2006:073
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.novell.com/linux/security/advisories/2006_05_05.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2007-0795.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.redhat.com/support/errata/RHSA-2007-0878.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/archive/1/493080/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/17446
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.trustix.org/errata/2006/0024
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vmware.com/security/advisories/VMSA-2008-0009.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2006/1306
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2006/3852
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2008/1744
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25738
Source: af854a3a-2127-422b-91ae-364da2661108
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9861
Source: af854a3a-2127-422b-91ae-364da2661108
https://usn.ubuntu.com/272-1/
Source: af854a3a-2127-422b-91ae-364da2661108

68 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
3.6%
88th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-20

Affected Vendors

cyrus

Related CVEs

CVE-2026-41279 N/A
CVE-2026-41278 N/A
CVE-2026-41277 N/A
CVE-2026-41276 N/A
CVE-2026-41275 N/A