2

GLSA 200907-09 (High): cyrus-sasl

view story
linux-howto

http://security.gentoo.org – Cyrus-SASL: Execution of arbitrary code (Security)

colm's picture
Submitted by colm on 07/13/2009

Stories similar to GLSA 200907-09 (High): cyrus-sasl

Hello

I hope somebody can help with this.

I have a shell, that in case of failure, sends an email (relaying through an Exchange Server).

Hello

I hope somebody can help with this.

I have a shell, that in case of failure, sends an email (relaying through an Exchange Server).

Trying to install postfix from ports and get this error:

===> Compressing manual pages for cyrus-sasl-2.1.26_2 ===> Running ldconfig /sbin/ldconfig -m /usr/local/lib ===> Registering installation for cyrus-sasl-2.1.26_2 ===> Returning to build of postfix-2.9.4_2,1 Error: shared library "sasl2.2" does not exist *** Error code 1

Stop in /usr/ports/mail/postfix. *** Error code

I have a very strange issue! SASL does not work properly, as it does not accept plain-text passwords (like Outlook sends them)

Oct 2 10:35:09 srf cyrus/imap[4119]: accepted connection Oct 2 10:35:09 srf cyrus/imap[4119]: badlogin: [217.XX.XXX.140] plaintext user@domain.com SASL(-1): generic failure: checkpass failed

Now I switch to "Encrypted password" in Thunderbird.

Referenced CVEs: 

CVE-2009-0688

Description: 

=========================================================== Ubuntu Security Notice USN-790-1 June 24, 2009 cyrus-sasl2 vulnerability CVE-2009-0688 ===========================================================

A security iss

Cyrus IMAP Server: Multiple vulnerabilities

I tried calling a web service using Axis C++ from a .c file of cyrus sasl package ( a modified mechanism, I added a piece of code to call a webservice in plain.c ). I added the .c stub files generated by Axis C++ and library files to the make file in plugins directory. It got compiled properly and the libplain.so, libplain.so.2, libplain.so.2.0.25 got generated successfuly.

Multiple Ralink wireless drivers: Execution of arbitrary code

[ubuntu] SMTPD SASL Auth Issues 39 weeks 2 hours ago

Hi All,

I have done a lot of searching and can't seem to figure this out.

I have setup a mail server; components are as follows: Ubuntu 12.04 Server, Courier, MySQL, Amavisd-new, SpamAssassin, ClamAV, SASL, TLS, Postgrey and Roundcube

I can login to Courier and Roundcube. I can send mail(including to external recipients). I can recieve mail.

As far as I can tell everything is working, excep