Download List

Descripción del Proyecto

The Cyrus SASL library is a generic library for easy integration of secure network authentication to any client or server application. It supports authentication via standard plaintext methods as well as CRAM-MD5 and DIGEST-MD5 shared secret methods and KERBEROS_V4 and GSSAPI Kerberos methods. The SASL protocol framework is used by SMTP, IMAP, ACAP, LDAP, and other standard protocols.

System Requirements

System requirement is not defined
Information regarding Project Releases and Project Resources. Note that the information here is a quote from Freecode.com page, and the downloads themselves may not be hosted on OSDN.

2004-11-23 01:24 Back to release list
2.1.20

La revisión más importante es evitar un ataque con la variable de entorno SASL_PATH sasl cuando se utiliza en un entorno de setuid (esto es poco frecuente, pero posible). El plug-in MD5 CRAM tiene una corrección de errores de una referencia variable no inicializada. También se incluyen las correcciones de portabilidad NTLM.
Tags: SASLv2, Minor security fixes
The most important fix is to avoid an attack using the SASL_PATH environment variable when sasl is used in a setuid environment (this is infrequent but possible). The CRAM MD5 plugin has a bugfix for an uninitialized variable reference. Also included are NTLM portability fixes.

Project Resources