Lucene search
FreeBSDD1BBC235-C0C9-45CD-8D2D-C1B8FD22E616HistoryJan 04, 2005 - 12:00 a.m.
imap-uw -- authentication bypass when CRAM-MD5 is enabled
2005-01-0400:00:00
vuxml.freebsd.org
10
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.023 Low
EPSS
Percentile
89.7%
The CRAM-MD5 authentication support of the University of
Washington IMAP and POP3 servers contains a vulnerability that
may allow an attacker to bypass authentication and impersonate
arbitrary users. Only installations with CRAM-MD5 support
configured are affected.
Related
openvas
openvas
SLES9: Security update for imap
2009-10-10 00:00:00
FreeBSD Ports: imap-uw
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200502-02 (uw-imap)
2008-09-24 00:00:00
redhat
redhat
(RHSA-2005:128) imap security update
2005-02-23 00:00:00
nessus
nessus
GLSA-200502-02 : UW IMAP: CRAM-MD5 authentication bypass
2005-02-14 00:00:00
UW-IMAP CRAM-MD5 Remote Authentication Bypass
2005-01-29 00:00:00
RHEL 3 : imap (RHSA-2005:128)
2005-02-23 00:00:00
cvelist
cvelist
CVE-2005-0198
2005-02-06 05:00:00
suse
suse
remote authentication bypass in imap
2005-03-01 09:32:11
debiancve
debiancve
CVE-2005-0198
2005-05-02 04:00:00
gentoo
gentoo
UW IMAP: CRAM-MD5 authentication bypass
2005-02-02 00:00:00
cve
cve
CVE-2005-0198
2005-05-02 04:00:00
ubuntucve
ubuntucve
CVE-2005-0198
2005-05-02 00:00:00
cert
cert
UW-imapd fails to properly authenticate users when using CRAM-MD5
2005-01-27 00:00:00
nvd
nvd
CVE-2005-0198
2005-05-02 04:00:00
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.023 Low
EPSS
Percentile
89.7%
Related for D1BBC235-C0C9-45CD-8D2D-C1B8FD22E616