Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > General Zimbra > Announcements

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 04-25-2006, 04:33 PM
lee lee is offline
Active Member
 
Posts: 25
Default Remote DOS condition in Cyrus-SASL

http://www.securityfocus.com/archive.../30/0/threaded

Does this effect /opt/zimbra/cyrus-sasl-2.1.21.ZIMBRA/ in the current Zimbra Network Edition?
Reply With Quote
  #2 (permalink)  
Old 04-25-2006, 05:20 PM
Zimbra Employee
 
Posts: 274
Default does not affect ZCS

ZCS includes cyrus-sasl-2.1.21 which is not vulnerable:

http://asg.web.cmu.edu/archive/messa...-sasl&msg=7775
http://labs.musecurity.com/advisories/MU-200604-01.txt

Also we don't support the digest-md5 auth method.

Thanks for bringing this to our attention.
__________________
Bugzilla - Wiki - Downloads - Before posting... Search!
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads

Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com




 

SEO by vBSEO ©2011, Crawlability, Inc.