Mandriva Linux Security Advisory MDKSA-2006-073: A vulnerability in the CMU Cyrus Simple Authentication and Security Layer (SASL) library versions less than 2.1.21, has an unknown impact and remote unauthenticated attack vectors, related to DIGEST-MD5 negotiation. In practice, Marcus Meissner found it is possible to crash the cyrus-imapd daemon with a carefully crafted communication that leaves out “realm= ” in the reply or the initial server response.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45699/MDKSA-2006-073.txt
Source: https://packetstormsecurity.com/files/45699/Mandriva-Linux-Security-Advisory-2006.073.html