CVE-2004-0884: The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment...

Security readout for executives and security teams

This is a local privilege-risk issue in Cyrus-SASL. Older libsasl/libsasl2 versions trust the SASL_PATH environment variable when loading authentication plug-ins. A local user could redirect that path to malicious code, causing software using the library to execute code it should not run. Exposure is most likely on legacy Unix/Linux or bundled application environments still running Cyrus-SASL 2.1.18 or earlier. Systems without local untrusted users are less exposed, but services that preserve attacker-controlled environment variables need review. Treat as a legacy cleanup and local privilege-risk item. It is not supported by the provided sources as internet-wormable or actively exploited, but affected authentication libraries can create serious impact on multi-user or poorly isolated systems. Mitigation focus: Inventory Cyrus-SASL packages and bundled libsasl/libsasl2 copies.; Prioritize vendor-updated Cyrus-SASL packages from the relevant OS or application vendor.; Check vendor advisories for fixed package versions and supported upgrade paths..

Prepared

Jun 30, 2026, 02:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.