A critical authentication bypass vulnerability in the Perl Authen::SASL::Perl::DIGEST_MD5 module allows unauthenticated attackers to hijack user sessions via replay attacks.

This is an authentication bypass by capture-replay (CWE-294) where the server fails to validate that the nonce returned by the client matches the nonce generated by the server. This allows an unauthenticated attacker to replay a previously captured authentication response to successfully authenticate as another user without knowledge of their password.

Successful exploitation of this vulnerability results in total unauthorized access to affected services. With a CVSS score of 9.8, the impact is critical because it allows an attacker to impersonate any user, leading to full data compromise, unauthorized transactions, and complete loss of system integrity.

Immediate Action: Upgrade the Authen::SASL module to version 2.2100 or later to ensure proper nonce validation is implemented.

Proactive Monitoring: Review authentication logs for anomalous patterns, such as multiple successful logins from different source IPs using the same session parameters or unusual spikes in digest-based authentication activity.

Compensating Controls: Ensure that services utilizing this module are restricted by network-level access controls where possible to limit the scope of potential replay attacks while the update is being deployed.

Public Exploit Available: Unknown

This vulnerability presents a severe risk to organizational security by undermining the core identity verification process. Given the critical severity and the ease of exploitation, administrators must prioritize patching the affected Perl module immediately to prevent unauthorized access and potential account takeover.