Description
Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.
References
- RHSA-2001:150 vendor-advisory
- CSSA-2001-040.0 vendor-advisory
- RHSA-2001:151 vendor-advisory
- 3498 vdb-entry
- SuSE-SA:2001:042 vendor-advisory
- cyrus-sasl-format-string(7443) vdb-entry
- CLA-2001:444 vendor-advisory
- MDKSA-2002:018 vendor-advisory