Skip to content
OpenAdvisories

Package · Debian

libauthen-sasl-perl

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step

    Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step. server_start generates a fresh nonce and sends it in the challenge, and nothing later compares that value against the …