Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2005-0198HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-0198
2005-05-0204:00:00
Debian Security Bug Tracker
security-tracker.debian.org
7
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.023 Low
EPSS
Percentile
89.7%
A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | uw-imap | < 7:2002edebian1-6 | uw-imap_7:2002edebian1-6_all.deb |
| Debian | 11 | all | uw-imap | < 7:2002edebian1-6 | uw-imap_7:2002edebian1-6_all.deb |
| Debian | 10 | all | uw-imap | < 7:2002edebian1-6 | uw-imap_7:2002edebian1-6_all.deb |
| Debian | 999 | all | uw-imap | < 7:2002edebian1-6 | uw-imap_7:2002edebian1-6_all.deb |
| Debian | 13 | all | uw-imap | < 7:2002edebian1-6 | uw-imap_7:2002edebian1-6_all.deb |
Related
openvas
openvas
SLES9: Security update for imap
2009-10-10 00:00:00
FreeBSD Ports: imap-uw
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200502-02 (uw-imap)
2008-09-24 00:00:00
redhat
redhat
(RHSA-2005:128) imap security update
2005-02-23 00:00:00
nessus
nessus
GLSA-200502-02 : UW IMAP: CRAM-MD5 authentication bypass
2005-02-14 00:00:00
SuSE9 Security Update : imap (YOU Patch Number 9885)
2009-09-24 00:00:00
SUSE-SA:2005:012: imap
2005-03-01 00:00:00
suse
suse
remote authentication bypass in imap
2005-03-01 09:32:11
freebsd
freebsd
imap-uw -- authentication bypass when CRAM-MD5 is enabled
2005-01-04 00:00:00
gentoo
gentoo
UW IMAP: CRAM-MD5 authentication bypass
2005-02-02 00:00:00
cve
cve
CVE-2005-0198
2005-05-02 04:00:00
ubuntucve
ubuntucve
CVE-2005-0198
2005-05-02 00:00:00
cert
cert
UW-imapd fails to properly authenticate users when using CRAM-MD5
2005-01-27 00:00:00
nvd
nvd
CVE-2005-0198
2005-05-02 04:00:00
cvelist
cvelist
CVE-2005-0198
2005-02-06 05:00:00
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.023 Low
EPSS
Percentile
89.7%
Related for DEBIANCVE:CVE-2005-0198