CVE-2006-1721

Publication date 11 April 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.

Status

Package Ubuntu Release Status
cyrus-sasl2 7.04 feisty
Fixed 2.1.19.dfsg1-0.1ubuntu2
6.10 edgy
Fixed 2.1.19.dfsg1-0.1ubuntu2
6.06 LTS dapper
Fixed 2.1.19.dfsg1-0.1ubuntu2
cyrus-sasl2-heimdal 7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release

References

Related Ubuntu Security Notices (USN)

    • USN-272-1
    • cyrus-sasl2 vulnerability
    • 24 April 2006

Other references