CVE-2000-0956
MediumExploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
cyrus-sasl before version 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow users to bypass specified access restrictions.
Risk Assessment
Local users may gain unauthorized access to resources, potentially violating the organization's security policy.
Recommendation
Update cyrus-sasl to version 1.5.24 or later and review authorization configuration.
Other vulnerabilities in cyrus-sasl
See all- CVE-2019-19906High
cyrus-sasl 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is caused by an off-by-one error in _sasl_add_string in common.c.
- CVE-2026-107161High
Heap-based buffer overflow in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin does not recompute buffer size after quoting, leading to out-of-bounds write. A malicious server can crash the client.
Original NVD description (English source)
cyrus-sasl before 1.5.24 in Red Hat Linux 7.0 does not properly verify the authorization for a local user, which could allow the users to bypass specified access restrictions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS