CVE-2009-0688: High – Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23

CWE Weakness Definitions

CWE-119: Improper Restriction of Operations within Memory Buffer

Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.

◆ SAGE Intelligence — CITED Relevance Research Team

This vulnerability was disclosed in 2009. A high severity vulnerability affects Carnegie Mellon University systems (CVE-2009-0688). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2009-GLOBAL-082846-H • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →

Frequently Asked Questions

What is CVE-2009-0688?

This vulnerability was disclosed in 2009. A high severity vulnerability affects Carnegie Mellon University systems (CVE-2009-0688). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

What is the CVSS score for CVE-2009-0688?

CVE-2009-0688 has CVSS 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. EPSS: 8.2%.

Is CVE-2009-0688 actively exploited?

No confirmed active exploitation of CVE-2009-0688 as of 2026-05-30.

How do I remediate CVE-2009-0688?

Priority: MEDIUM. Advisory: ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-sasl-2.1.23.tar.gz

What systems are affected by CVE-2009-0688?

CVE-2009-0688 affects: Carnegie Mellon University.

Vulnerability Details

CVE ID	`CVE-2009-0688`
BSID	`BS-2009-GLOBAL-082846-H` BreachSpider Global ID
CVSS Vector	`AV:N/AC:L/Au:N/C:P/I:P/A:P`
Published	2009-05-15
Last Modified	2026-04-23
ICS Relevance	15%
Weakness (CWE)	Improper Restriction of Operations within Memory Buffer
Source	NVD

Official Description

Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: Multiple buffer overflows in the CMU Cyrus SASL library before 2.1.23 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via strings that are used as input to the sasl_encode64 function in lib/saslutil.c. CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P.

Exploitation Likelihood: LOW

Affected Products

Vendor	Product	Fixed Version
Carnegie Mellon University	Cyrus-Sasl	—

Remediation

View Vendor Advisory →

Remediation Priority: MEDIUM

Threat Intelligence

● Threat Intelligence Validated: July 2026 | Threat Age: 6267 Days

CISA KEV	Not in KEV catalog
Public Exploit	Not confirmed
PoC Code	Not confirmed

SAGE Enrichment Record — provenance & audit hash

Model	`rule-based-v1`
Confidence	MEDIUM
Enriched At	2026-05-24
SHA-512 Audit Hash	`5c83f4a5986d968461ffa740e37a01e76ce72d32c8c54cc07bf34b7f9d04bcb4dcb3e54af6fc1d53b274b16ccc6583a0dc24df7a39340c3440c3b76a56196cb0`

Related CVEs affecting Carnegie Mellon University

CVE-2004-1015 10.0 Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the i... CVE-2004-1067 10.0 Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9... CVE-2004-1011 10.0 Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with th... CVE-2004-1012 10.0 The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and ear... CVE-2004-1013 10.0 The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2...

View all Carnegie Mellon University CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider monitors 353,228 CVEs across ICS/OT vendors. SAGE-enriched alerts with virtual patches, NERC-CIP mapping, and PSIRT contacts delivered to your SIEM in minutes.

Join free →