VDB
RHSA-2004:546
RHSA-2004:546
PUBLISHED
Updated cyrus-sasl packages that fix a setuid and setgid application vulnerability are now available. [Updated 7th October 2004] Revised cryus-sasl packages have been added for Red Hat Enterprise Linux 3; the patch in the previous packages broke interaction with ldap.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Enterprise Linux ES version 3 | ||
| Red Hat Enterprise Linux AS version 3 | ||
| Red Hat Desktop version 3 | ||
| Red Hat Enterprise Linux WS version 3 | ||
| cyrus |
Timeline
- Oct 7, 2004 CVE Published
- Nov 21, 2024 CVE Updated
- Apr 9, 2026 Distribution Patch
- Apr 9, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 18, 2026 Security Advisory
References
- https://bugzilla.redhat.com/show_bug.cgi?id=134657 url
- https://access.redhat.com/security/updates/classification/#important url
- https://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/lib/common.c.diff?r1=1.103&r2=1.104 url
- https://bugzilla.redhat.com/show_bug.cgi?id=134979 url
- https://security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_546.json advisory
- https://access.redhat.com/errata/RHSA-2004:546 fix