Lucene search
HistoryJan 14, 2006 - 1:03 a.m.
CVE-2006-0213
kolab server
plaintext
authentication
credentials
storage
security vulnerability
cve-2006-0213
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges.
Affected configurations
Node
kolabkolab_groupware_serverRange≤2005-12-15_pre2.1
ORkolabkolab_groupware_serverMatch2.0.1
ORkolabkolab_groupware_serverMatch2.0.2
Related
cvelist
cvelist
CVE-2006-0213
2006-01-14 01:00:00
nvd
nvd
CVE-2006-0213
2006-01-14 01:03:00
prion
prion
Authentication flaw
2006-01-14 01:03:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2006-0213