Cyrus SASL 'sasl_encode64()' Remote Buffer Overflow Vulnerability

Bugtraq ID:	34961
Class:	Boundary Condition Error
CVE:	CVE-2009-0688
Remote:	Yes
Local:	No
Published:	May 14 2009 12:00AM
Updated:	Apr 13 2010 10:44PM
Credit:	James Ralston
Vulnerable:	Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 9 SuSE SUSE Linux Enterprise 11 SuSE SUSE Linux Enterprise 10 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_99 Sun OpenSolaris build snv_96 Sun OpenSolaris build snv_95 Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Sun OpenSolaris build snv_88 Sun OpenSolaris build snv_87 Sun OpenSolaris build snv_86 Sun OpenSolaris build snv_85 Sun OpenSolaris build snv_84 Sun OpenSolaris build snv_83 Sun OpenSolaris build snv_82 Sun OpenSolaris build snv_81 Sun OpenSolaris build snv_80 Sun OpenSolaris build snv_78 Sun OpenSolaris build snv_77 Sun OpenSolaris build snv_76 Sun OpenSolaris build snv_68 Sun OpenSolaris build snv_67 Sun OpenSolaris build snv_64 Sun OpenSolaris build snv_61 Sun OpenSolaris build snv_59 Sun OpenSolaris build snv_58 Sun OpenSolaris build snv_57 Sun OpenSolaris build snv_54 Sun OpenSolaris build snv_50 Sun OpenSolaris build snv_49 Sun OpenSolaris build snv_47 Sun OpenSolaris build snv_45 Sun OpenSolaris build snv_41 Sun OpenSolaris build snv_39 Sun OpenSolaris build snv_36 Sun OpenSolaris build snv_29 Sun OpenSolaris build snv_22 Sun OpenSolaris build snv_19 Sun OpenSolaris build snv_13 Sun OpenSolaris build snv_117 Sun OpenSolaris build snv_116 Sun OpenSolaris build snv_115 Sun OpenSolaris build snv_114 Sun OpenSolaris build snv_113 Sun OpenSolaris build snv_112 Sun OpenSolaris build snv_111a Sun OpenSolaris build snv_111 Sun OpenSolaris build snv_110 Sun OpenSolaris build snv_109 Sun OpenSolaris build snv_108 Sun OpenSolaris build snv_107 Sun OpenSolaris build snv_106 Sun OpenSolaris build snv_105 Sun OpenSolaris build snv_104 Sun OpenSolaris build snv_103 Sun OpenSolaris build snv_102 Sun OpenSolaris build snv_101a Sun OpenSolaris build snv_101 Sun OpenSolaris build snv_100 Sun OpenSolaris build snv_02 Sun OpenSolaris build snv_01 Sun ONE Directory Server 5.2 Sun Java System Directory Server Enterprise Edition 6.3.1 Sun Java System Directory Server Enterprise Edition 6.3 Sun Java System Directory Server Enterprise Edition 6.2 Sun Java System Directory Server Enterprise Edition 6.1 Sun Java System Directory Server Enterprise Edition 6.0 Sun Java System Directory Server 5.2 Patch6 Sun Java System Directory Server 5.2 Patch4 Sun Java System Directory Server 5.2 Patch3 Sun Java System Directory Server 5.2 Patch2 Sun Java System Directory Server 5.2 2005Q4 Sun Java System Directory Server 5.2 2005Q1 Sun Java System Directory Server 5.2 2004Q2 Sun Java System Directory Server 5.2 2003Q4 Slackware Linux 10.2 Slackware Linux 12.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 S.u.S.E. Open-Enterprise-Server 0 S.u.S.E. Novell Linux Desktop 9.0 rPath rPath Linux 2 rPath rPath Linux 1 rPath Appliance Platform Linux Service 2 rPath Appliance Platform Linux Service 1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux Desktop version 4 Redhat Enterprise Linux 5 Server Pardus Linux 2008 0 Nortel Networks Self-Service CCXML 0 Nortel Networks Self Service VoiceXML 0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Cyrus-Utils SASL 2.1.21 Cyrus-Utils SASL 2.1.20 Cyrus-Utils SASL 2.1.19 Cyrus-Utils SASL 2.1.18 -r2 Cyrus-Utils SASL 2.1.18 -r1 Cyrus-Utils SASL 2.1.18 Cyrus-Utils SASL 2.1.17 Cyrus-Utils SASL 2.1.16 Cyrus-Utils SASL 2.1.15 Cyrus-Utils SASL 2.1.14 Cyrus-Utils SASL 2.1.13 Cyrus-Utils SASL 2.1.12 Cyrus-Utils SASL 2.1.11 Cyrus-Utils SASL 2.1.10 Cyrus-Utils SASL 2.1.9 + Redhat Linux 8.0 i386 + Redhat Linux 8.0 Avaya Message Networking MN 3.1 Avaya Intuity AUDIX LX 2.0 SP2 Avaya Intuity AUDIX LX 2.0 SP1 Avaya Interactive Response 4.0 Avaya CMS Server 15.0 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5
Not Vulnerable:	Cyrus-Utils SASL 2.1.23

Cyrus SASL 'sasl_encode64()' Remote Buffer Overflow Vulnerability

Cyrus SASL is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

An attacker can exploit this issue to execute arbitrary code within the context of an application using the affected library. Failed exploit attempts will result in denial-of-service conditions.

Versions prior to Cyrus SASL 2.1.23 are vulnerable.

Cyrus SASL 'sasl_encode64()' Remote Buffer Overflow Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cyrus SASL 'sasl_encode64()' Remote Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 8.10 powerpc

• Ubuntu cyrus-sasl2-dbg_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22 .dfsg1-21ubuntu2.1_powerpc.deb


• Ubuntu cyrus-sasl2-doc_2.1.22.dfsg1-21ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2- doc_2.1.22.dfsg1-21ubuntu2.1_all.deb


• Ubuntu libsasl2-2_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg 1-21ubuntu2.1_powerpc.deb


• Ubuntu libsasl2-dev_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.df sg1-21ubuntu2.1_powerpc.deb


• Ubuntu libsasl2-modules-gssapi-mit_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-g ssapi-mit_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb


• Ubuntu libsasl2-modules-ldap_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-l dap_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb


• Ubuntu libsasl2-modules-otp_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-o tp_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb


• Ubuntu libsasl2-modules-sql_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2 .1.22.dfsg1-21ubuntu2.1_powerpc.deb


• Ubuntu libsasl2-modules_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.2 2.dfsg1-21ubuntu2.1_powerpc.deb


• Ubuntu sasl2-bin_2.1.22.dfsg1-21ubuntu2.1_powerpc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1 -21ubuntu2.1_powerpc.deb

Sun Java System Directory Server 5.2 Patch6

• Sun 142806-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -142806-01-1

Debian Linux 5.0 alpha

• Debian cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -dbg_2.1.22.dfsg1-23+lenny1_alpha.deb


• Debian cyrus-sasl2-doc_2.1.22.dfsg1-23+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -doc_2.1.22.dfsg1-23+lenny1_all.deb


• Debian cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyr us-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_alpha.deb


• Debian libsasl2-2_2.1.22.dfsg1-23+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_ 2.1.22.dfsg1-23+lenny1_alpha.deb


• Debian libsasl2-dev_2.1.22.dfsg1-23+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-de v_2.1.22.dfsg1-23+lenny1_alpha.deb


• Debian libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/lib sasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_alpha.deb


• Debian libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-gssapi-mit_2.1.22.dfsg1-23+lenny1_alpha.deb


• Debian libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-ldap_2.1.22.dfsg1-23+lenny1_alpha.deb


• Debian libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-otp_2.1.22.dfsg1-23+lenny1_alpha.deb


• Debian libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-sql_2.1.22.dfsg1-23+lenny1_alpha.deb


• Debian libsasl2-modules_2.1.22.dfsg1-23+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules_2.1.22.dfsg1-23+lenny1_alpha.deb


• Debian sasl2-bin_2.1.22.dfsg1-23+lenny1_alpha.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2 .1.22.dfsg1-23+lenny1_alpha.deb

Mandriva Linux Mandrake 2008.0

• Mandriva cyrus-sasl-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-devel-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-plug-anonymous-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-plug-crammd5-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-plug-digestmd5-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-plug-gssapi-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-plug-ldapdb-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-plug-login-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-plug-ntlm-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-plug-otp-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-plug-plain-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-plug-sasldb-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libsasl2-plug-sql-2.1.22-23.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.04 sparc

• Ubuntu cyrus-sasl2-dbg_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22 .dfsg1-23ubuntu3.1_sparc.deb


• Ubuntu cyrus-sasl2-doc_2.1.22.dfsg1-23ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2- doc_2.1.22.dfsg1-23ubuntu3.1_all.deb


• Ubuntu libsasl2-2_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg 1-23ubuntu3.1_sparc.deb


• Ubuntu libsasl2-dev_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.df sg1-23ubuntu3.1_sparc.deb


• Ubuntu libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-g ssapi-mit_2.1.22.dfsg1-23ubuntu3.1_sparc.deb


• Ubuntu libsasl2-modules-ldap_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-l dap_2.1.22.dfsg1-23ubuntu3.1_sparc.deb


• Ubuntu libsasl2-modules-otp_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-o tp_2.1.22.dfsg1-23ubuntu3.1_sparc.deb


• Ubuntu libsasl2-modules-sql_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2 .1.22.dfsg1-23ubuntu3.1_sparc.deb


• Ubuntu libsasl2-modules_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.2 2.dfsg1-23ubuntu3.1_sparc.deb


• Ubuntu sasl2-bin_2.1.22.dfsg1-23ubuntu3.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1 -23ubuntu3.1_sparc.deb

Ubuntu Ubuntu Linux 8.10 sparc

• Ubuntu cyrus-sasl2-dbg_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22 .dfsg1-21ubuntu2.1_sparc.deb


• Ubuntu cyrus-sasl2-doc_2.1.22.dfsg1-21ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2- doc_2.1.22.dfsg1-21ubuntu2.1_all.deb


• Ubuntu libsasl2-2_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg 1-21ubuntu2.1_sparc.deb


• Ubuntu libsasl2-dev_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.df sg1-21ubuntu2.1_sparc.deb


• Ubuntu libsasl2-modules-gssapi-mit_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-g ssapi-mit_2.1.22.dfsg1-21ubuntu2.1_sparc.deb


• Ubuntu libsasl2-modules-ldap_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-l dap_2.1.22.dfsg1-21ubuntu2.1_sparc.deb


• Ubuntu libsasl2-modules-otp_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-o tp_2.1.22.dfsg1-21ubuntu2.1_sparc.deb


• Ubuntu libsasl2-modules-sql_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2 .1.22.dfsg1-21ubuntu2.1_sparc.deb


• Ubuntu libsasl2-modules_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.2 2.dfsg1-21ubuntu2.1_sparc.deb


• Ubuntu sasl2-bin_2.1.22.dfsg1-21ubuntu2.1_sparc.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1 -21ubuntu2.1_sparc.deb

Ubuntu Ubuntu Linux 9.04 lpia

• Ubuntu cyrus-sasl2-dbg_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22 .dfsg1-23ubuntu3.1_lpia.deb


• Ubuntu cyrus-sasl2-doc_2.1.22.dfsg1-23ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2- doc_2.1.22.dfsg1-23ubuntu3.1_all.deb


• Ubuntu libsasl2-2_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg 1-23ubuntu3.1_lpia.deb


• Ubuntu libsasl2-dev_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.df sg1-23ubuntu3.1_lpia.deb


• Ubuntu libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-g ssapi-mit_2.1.22.dfsg1-23ubuntu3.1_lpia.deb


• Ubuntu libsasl2-modules-ldap_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-l dap_2.1.22.dfsg1-23ubuntu3.1_lpia.deb


• Ubuntu libsasl2-modules-otp_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-o tp_2.1.22.dfsg1-23ubuntu3.1_lpia.deb


• Ubuntu libsasl2-modules-sql_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2 .1.22.dfsg1-23ubuntu3.1_lpia.deb


• Ubuntu libsasl2-modules_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.2 2.dfsg1-23ubuntu3.1_lpia.deb


• Ubuntu sasl2-bin_2.1.22.dfsg1-23ubuntu3.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1 -23ubuntu3.1_lpia.deb

Debian Linux 5.0 armel

• Debian cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -dbg_2.1.22.dfsg1-23+lenny1_armel.deb


• Debian cyrus-sasl2-doc_2.1.22.dfsg1-23+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -doc_2.1.22.dfsg1-23+lenny1_all.deb


• Debian cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyr us-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_armel.deb


• Debian libsasl2-2_2.1.22.dfsg1-23+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_ 2.1.22.dfsg1-23+lenny1_armel.deb


• Debian libsasl2-dev_2.1.22.dfsg1-23+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-de v_2.1.22.dfsg1-23+lenny1_armel.deb


• Debian libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/lib sasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_armel.deb


• Debian libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-gssapi-mit_2.1.22.dfsg1-23+lenny1_armel.deb


• Debian libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-ldap_2.1.22.dfsg1-23+lenny1_armel.deb


• Debian libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-otp_2.1.22.dfsg1-23+lenny1_armel.deb


• Debian libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-sql_2.1.22.dfsg1-23+lenny1_armel.deb


• Debian libsasl2-modules_2.1.22.dfsg1-23+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules_2.1.22.dfsg1-23+lenny1_armel.deb


• Debian sasl2-bin_2.1.22.dfsg1-23+lenny1_armel.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2 .1.22.dfsg1-23+lenny1_armel.deb

Debian Linux 5.0 mips

• Debian cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -dbg_2.1.22.dfsg1-23+lenny1_mips.deb


• Debian cyrus-sasl2-doc_2.1.22.dfsg1-23+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -doc_2.1.22.dfsg1-23+lenny1_all.deb


• Debian cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyr us-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_mips.deb


• Debian libsasl2-2_2.1.22.dfsg1-23+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_ 2.1.22.dfsg1-23+lenny1_mips.deb


• Debian libsasl2-dev_2.1.22.dfsg1-23+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-de v_2.1.22.dfsg1-23+lenny1_mips.deb


• Debian libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/lib sasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_mips.deb


• Debian libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-gssapi-mit_2.1.22.dfsg1-23+lenny1_mips.deb


• Debian libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-ldap_2.1.22.dfsg1-23+lenny1_mips.deb


• Debian libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-otp_2.1.22.dfsg1-23+lenny1_mips.deb


• Debian libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-sql_2.1.22.dfsg1-23+lenny1_mips.deb


• Debian libsasl2-modules_2.1.22.dfsg1-23+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules_2.1.22.dfsg1-23+lenny1_mips.deb


• Debian sasl2-bin_2.1.22.dfsg1-23+lenny1_mips.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2 .1.22.dfsg1-23+lenny1_mips.deb

Ubuntu Ubuntu Linux 9.04 amd64

• Ubuntu cyrus-sasl2-dbg_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2- dbg_2.1.22.dfsg1-23ubuntu3.1_amd64.deb


• Ubuntu cyrus-sasl2-doc_2.1.22.dfsg1-23ubuntu3.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2- doc_2.1.22.dfsg1-23ubuntu3.1_all.deb


• Ubuntu libsasl2-2_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-2_2 .1.22.dfsg1-23ubuntu3.1_amd64.deb


• Ubuntu libsasl2-dev_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev _2.1.22.dfsg1-23ubuntu3.1_amd64.deb


• Ubuntu libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2 -modules-gssapi-mit_2.1.22.dfsg1-23ubuntu3.1_amd64.deb


• Ubuntu libsasl2-modules-ldap_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2 -modules-ldap_2.1.22.dfsg1-23ubuntu3.1_amd64.deb


• Ubuntu libsasl2-modules-otp_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2 -modules-otp_2.1.22.dfsg1-23ubuntu3.1_amd64.deb


• Ubuntu libsasl2-modules-sql_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-mod ules-sql_2.1.22.dfsg1-23ubuntu3.1_amd64.deb


• Ubuntu libsasl2-modules_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-mod ules_2.1.22.dfsg1-23ubuntu3.1_amd64.deb


• Ubuntu sasl2-bin_2.1.22.dfsg1-23ubuntu3.1_amd64.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2. 1.22.dfsg1-23ubuntu3.1_amd64.deb

Debian Linux 5.0 sparc

• Debian cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -dbg_2.1.22.dfsg1-23+lenny1_sparc.deb


• Debian cyrus-sasl2-doc_2.1.22.dfsg1-23+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -doc_2.1.22.dfsg1-23+lenny1_all.deb


• Debian cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyr us-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_sparc.deb


• Debian libsasl2-2_2.1.22.dfsg1-23+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_ 2.1.22.dfsg1-23+lenny1_sparc.deb


• Debian libsasl2-dev_2.1.22.dfsg1-23+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-de v_2.1.22.dfsg1-23+lenny1_sparc.deb


• Debian libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/lib sasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_sparc.deb


• Debian libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-gssapi-mit_2.1.22.dfsg1-23+lenny1_sparc.deb


• Debian libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-ldap_2.1.22.dfsg1-23+lenny1_sparc.deb


• Debian libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-otp_2.1.22.dfsg1-23+lenny1_sparc.deb


• Debian libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-sql_2.1.22.dfsg1-23+lenny1_sparc.deb


• Debian libsasl2-modules_2.1.22.dfsg1-23+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules_2.1.22.dfsg1-23+lenny1_sparc.deb


• Debian sasl2-bin_2.1.22.dfsg1-23+lenny1_sparc.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2 .1.22.dfsg1-23+lenny1_sparc.deb

Ubuntu Ubuntu Linux 8.10 i386

• Ubuntu cyrus-sasl2-dbg_2.1.22.dfsg1-21ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2- dbg_2.1.22.dfsg1-21ubuntu2.1_i386.deb


• Ubuntu cyrus-sasl2-doc_2.1.22.dfsg1-21ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2- doc_2.1.22.dfsg1-21ubuntu2.1_all.deb


• Ubuntu libsasl2-2_2.1.22.dfsg1-21ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-2_2 .1.22.dfsg1-21ubuntu2.1_i386.deb


• Ubuntu libsasl2-dev_2.1.22.dfsg1-21ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev _2.1.22.dfsg1-21ubuntu2.1_i386.deb


• Ubuntu libsasl2-modules-gssapi-mit_2.1.22.dfsg1-21ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2 -modules-gssapi-mit_2.1.22.dfsg1-21ubuntu2.1_i386.deb


• Ubuntu libsasl2-modules-ldap_2.1.22.dfsg1-21ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2 -modules-ldap_2.1.22.dfsg1-21ubuntu2.1_i386.deb


• Ubuntu libsasl2-modules-otp_2.1.22.dfsg1-21ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2 -modules-otp_2.1.22.dfsg1-21ubuntu2.1_i386.deb


• Ubuntu libsasl2-modules-sql_2.1.22.dfsg1-21ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-mod ules-sql_2.1.22.dfsg1-21ubuntu2.1_i386.deb


• Ubuntu libsasl2-modules_2.1.22.dfsg1-21ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-mod ules_2.1.22.dfsg1-21ubuntu2.1_i386.deb


• Ubuntu sasl2-bin_2.1.22.dfsg1-21ubuntu2.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2. 1.22.dfsg1-21ubuntu2.1_i386.deb

Debian Linux 5.0 s/390

• Debian cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -dbg_2.1.22.dfsg1-23+lenny1_s390.deb


• Debian cyrus-sasl2-doc_2.1.22.dfsg1-23+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -doc_2.1.22.dfsg1-23+lenny1_all.deb


• Debian cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyr us-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_s390.deb


• Debian libsasl2-2_2.1.22.dfsg1-23+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_ 2.1.22.dfsg1-23+lenny1_s390.deb


• Debian libsasl2-dev_2.1.22.dfsg1-23+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-de v_2.1.22.dfsg1-23+lenny1_s390.deb


• Debian libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/lib sasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_s390.deb


• Debian libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-gssapi-mit_2.1.22.dfsg1-23+lenny1_s390.deb


• Debian libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-ldap_2.1.22.dfsg1-23+lenny1_s390.deb


• Debian libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-otp_2.1.22.dfsg1-23+lenny1_s390.deb


• Debian libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-sql_2.1.22.dfsg1-23+lenny1_s390.deb


• Debian libsasl2-modules_2.1.22.dfsg1-23+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules_2.1.22.dfsg1-23+lenny1_s390.deb


• Debian sasl2-bin_2.1.22.dfsg1-23+lenny1_s390.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2 .1.22.dfsg1-23+lenny1_s390.deb

Ubuntu Ubuntu Linux 8.04 LTS lpia

• Ubuntu cyrus-sasl2-dbg_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/cyrus-sasl2-dbg_2.1.22 .dfsg1-18ubuntu2.1_lpia.deb


• Ubuntu cyrus-sasl2-doc_2.1.22.dfsg1-18ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/cyrus-sasl2- doc_2.1.22.dfsg1-18ubuntu2.1_all.deb


• Ubuntu libsasl2-2_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-2_2.1.22.dfsg 1-18ubuntu2.1_lpia.deb


• Ubuntu libsasl2-dev_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-dev_2.1.22.df sg1-18ubuntu2.1_lpia.deb


• Ubuntu libsasl2-modules-gssapi-mit_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-g ssapi-mit_2.1.22.dfsg1-18ubuntu2.1_lpia.deb


• Ubuntu libsasl2-modules-ldap_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-l dap_2.1.22.dfsg1-18ubuntu2.1_lpia.deb


• Ubuntu libsasl2-modules-otp_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/universe/c/cyrus-sasl2/libsasl2-modules-o tp_2.1.22.dfsg1-18ubuntu2.1_lpia.deb


• Ubuntu libsasl2-modules-sql_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules-sql_2 .1.22.dfsg1-18ubuntu2.1_lpia.deb


• Ubuntu libsasl2-modules_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/libsasl2-modules_2.1.2 2.dfsg1-18ubuntu2.1_lpia.deb


• Ubuntu libsasl2_2.1.22.dfsg1-18ubuntu2.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2_2.1 .22.dfsg1-18ubuntu2.1_all.deb


• Ubuntu sasl2-bin_2.1.22.dfsg1-18ubuntu2.1_lpia.deb
  http://ports.ubuntu.com/pool/main/c/cyrus-sasl2/sasl2-bin_2.1.22.dfsg1 -18ubuntu2.1_lpia.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Ubuntu libsasl2-dev_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-dev _2.1.19.dfsg1-0.1ubuntu3.1_i386.deb


• Ubuntu libsasl2-modules-gssapi-heimdal_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/universe/c/cyrus-sasl2/libsasl2 -modules-gssapi-heimdal_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb


• Ubuntu libsasl2-modules-sql_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-mod ules-sql_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb


• Ubuntu libsasl2-modules_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2-mod ules_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb


• Ubuntu libsasl2_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/libsasl2_2.1 .19.dfsg1-0.1ubuntu3.1_i386.deb


• Ubuntu sasl2-bin_2.1.19.dfsg1-0.1ubuntu3.1_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/c/cyrus-sasl2/sasl2-bin_2. 1.19.dfsg1-0.1ubuntu3.1_i386.deb

Debian Linux 5.0 hppa

• Debian cyrus-sasl2-dbg_2.1.22.dfsg1-23+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -dbg_2.1.22.dfsg1-23+lenny1_hppa.deb


• Debian cyrus-sasl2-doc_2.1.22.dfsg1-23+lenny1_all.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/cyrus-sasl2 -doc_2.1.22.dfsg1-23+lenny1_all.deb


• Debian cyrus-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/cyr us-sasl2-heimdal-dbg_2.1.22.dfsg1-23+lenny1_hppa.deb


• Debian libsasl2-2_2.1.22.dfsg1-23+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-2_ 2.1.22.dfsg1-23+lenny1_hppa.deb


• Debian libsasl2-dev_2.1.22.dfsg1-23+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-de v_2.1.22.dfsg1-23+lenny1_hppa.deb


• Debian libsasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2-heimdal/lib sasl2-modules-gssapi-heimdal_2.1.22.dfsg1-23+lenny1_hppa.deb


• Debian libsasl2-modules-gssapi-mit_2.1.22.dfsg1-23+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-gssapi-mit_2.1.22.dfsg1-23+lenny1_hppa.deb


• Debian libsasl2-modules-ldap_2.1.22.dfsg1-23+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-ldap_2.1.22.dfsg1-23+lenny1_hppa.deb


• Debian libsasl2-modules-otp_2.1.22.dfsg1-23+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-otp_2.1.22.dfsg1-23+lenny1_hppa.deb


• Debian libsasl2-modules-sql_2.1.22.dfsg1-23+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules-sql_2.1.22.dfsg1-23+lenny1_hppa.deb


• Debian libsasl2-modules_2.1.22.dfsg1-23+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/libsasl2-mo dules_2.1.22.dfsg1-23+lenny1_hppa.deb


• Debian sasl2-bin_2.1.22.dfsg1-23+lenny1_hppa.deb
  http://security.debian.org/pool/updates/main/c/cyrus-sasl2/sasl2-bin_2 .1.22.dfsg1-23+lenny1_hppa.deb

Apple Mac OS X 10.5.2

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.3

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.3

• Apple SecUpdSrvr2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.4

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.5

• Apple SecUpdSrvr2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.6

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.7

• Apple SecUpd2010-002Leo.dmg
  http://www.apple.com/support/downloads/

Cyrus-Utils SASL 2.1.13

• cyrus cyrus-sasl-2.1.23.tar.gz
  ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.23.tar.gz

Cyrus-Utils SASL 2.1.16

• cyrus cyrus-sasl-2.1.23.tar.gz
  ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.23.tar.gz

Cyrus-Utils SASL 2.1.18

• cyrus cyrus-sasl-2.1.23.tar.gz
  ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.23.tar.gz

Cyrus-Utils SASL 2.1.21

• cyrus cyrus-sasl-2.1.23.tar.gz
  ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.23.tar.gz

Cyrus-Utils SASL 2.1.9

• cyrus cyrus-sasl-2.1.23.tar.gz
  ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.23.tar.gz

Sun Java System Directory Server Enterprise Edition 6.3.1

• Sun 142807-01
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -142807-01-1

Cyrus SASL 'sasl_encode64()' Remote Buffer Overflow Vulnerability

References:

• Cyrus SASL Home Page (Cyrus)
  
• ASA-2009-184 - Security Vulnerability in the Solaris Simple Authentication and S (Avaya)
  
• ASA-2009-242 cyrus-imapd security update (RHSA-2009-1116) (Avaya)
  
• Nortel response to Sun Alert 264248 - Java (JES) SASL Library Potential Vulnerab (Nortel Networks)
  
• Oracle Critical Patch Update April 2010 (Oracle)
  
• Solution 259148: Security Vulnerability in the Solaris Simple Authentication and (Sun)
  
• Solution 259148: Security Vulnerability in the Solaris Simple Authentication and (Sun)
  
• This Alert covers CVE-2009-2404 and CVE-2009-0688 for the Directory Server compo (Sun)
  
• Vulnerability Note VU#238019 Cyrus SASL library buffer overflow vulnerability (US-CERT)