CVE-2009-0688

CVE-2009-0688 describes multiple buffer overflows in the CMU Cyrus SASL library, specifically affecting versions prior to 2.1.23. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service by providing specially crafted input to the sasl_encode64 function. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector and low attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.