About:
The Cyrus SASL library is a generic library for easy integration of secure network authentication to any client or server application. It supports authentication via standard plaintext methods as well as CRAM-MD5 and DIGEST-MD5 shared secret methods and KERBEROS_V4 and GSSAPI Kerberos methods. The SASL protocol framework is used by SMTP, IMAP, ACAP, LDAP, and other standard protocols.

Release focus: Minor security fixes

Changes:
Some minor feature enhancements, along with a fix for a potential format string vulnerability.

Author:
Carnegie Mellon <cyrus [dash] bugs+ [at] andrew [dot] cmu [dot] edu> [contact developer]

Rating:	reset 1 2 3 4 5 6 7 8 9 10
8.26/10.00 (6 votes)

Homepage:
http://asg.web.cmu.edu/cyrus/
Tar/GZ:
ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/
CVS tree (cvsweb):
http://bugzilla.andrew.cmu.edu/cgi-bin/cvsweb.cgi/src/sasl/

Trove categories: [change]

[Intended Audience]		Developers
[License]		OSI Approved :: BSD License (original)
[Topic]		Security, Software Development :: Libraries

Dependencies: [change]
OpenSSL (recommended)
[download links]

 Branches

Branch	Version	Last release	License	URLs
SASLv2	2.1.20	23-Nov-2004	BSD License (original)
SASLv1	1.5.28	16-Jul-2002	BSD License (original)

 Releases

Version	Focus	Date
1.5.28	Minor security fixes	16-Jul-2002 23:13
1.5.27	Minor security fixes	16-Feb-2002 20:58
1.5.24	N/A	21-Jul-2000 04:47
1.5.21	N/A	10-May-2000 20:18
1.5.20	N/A	26-Apr-2000 23:25
1.5.15	N/A	14-Jan-2000 10:58
1.5.13	N/A	02-Dec-1999 22:22
1.5.10	N/A	11-Oct-1999 13:57
1.5.5	N/A	21-Aug-1999 18:32

 Articles referencing this project

Red Hat: Updated cyrus-sasl packages correct a security issue by Patrick Lenz , in Security Tue, Sep 11th 2007 02:43 Red Hat: Updated cyrus-sasl package addresses a security issue by Patrick Lenz , in Security Tue, Sep 11th 2007 02:40 Debian: New Cyrus SASL packages fix denial of service by Patrick Lenz , in Security Tue, Apr 25th 2006 11:58 Debian: New cyrus-sasl packages fix arbitrary code execution by Patrick Lenz , in Security Tue, Oct 12th 2004 08:08

Red Hat: Updated cyrus-sasl packages fix buffer overflows by Patrick Lenz , in Security Tue, Jan 7th 2003 05:00 Red Hat: Updated Cyrus-SASL packages available by Patrick Lenz , in Security Fri, Nov 30th 2001 02:06 SuSE: cyrus-sasl possible local/remote privilege escalation by Patrick Lenz , in Security Fri, Nov 23rd 2001 09:28