CVE-2005-0198
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 5.1%
A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.
Produtos afetados
n/a · n/aReferências
http://secunia.com/advisories/14057http://secunia.com/advisories/14097http://securitytracker.com/id?1013037https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11306http://www.gentoo.org/security/en/glsa/glsa-200502-02.xmlhttp://www.kb.cert.org/vuls/id/702777http://www.kb.cert.org/vuls/id/CRDY-68QSL5http://www.mandriva.com/security/advisories?name=MDKSA-2005:026http://www.redhat.com/support/errata/RHSA-2005-128.htmlhttp://www.securityfocus.com/bid/12391