CVE

Id
11404  
CVE No.
CVE-2005-0198  
Status
Candidate  
Description
A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.  
Phase
Assigned (20050131)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
81137 11404 CVE-2005-0198 CERT-VN:VU#702777  View
81138 11404 CVE-2005-0198 URL:http://www.kb.cert.org/vuls/id/702777  View
81139 11404 CVE-2005-0198 CONFIRM:http://www.kb.cert.org/vuls/id/CRDY-68QSL5  View
81140 11404 CVE-2005-0198 GENTOO:GLSA-200502-02  View
81141 11404 CVE-2005-0198 URL:http://www.gentoo.org/security/en/glsa/glsa-200502-02.xml  View
81142 11404 CVE-2005-0198 MANDRAKE:MDKSA-2005:026  View
81143 11404 CVE-2005-0198 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:026  View
81144 11404 CVE-2005-0198 REDHAT:RHSA-2005:128  View
81145 11404 CVE-2005-0198 URL:http://www.redhat.com/support/errata/RHSA-2005-128.html  View
81146 11404 CVE-2005-0198 BID:12391  View
81147 11404 CVE-2005-0198 URL:http://www.securityfocus.com/bid/12391  View
81148 11404 CVE-2005-0198 OVAL:oval:org.mitre.oval:def:11306  View
81149 11404 CVE-2005-0198 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11306  View
81150 11404 CVE-2005-0198 SECTRACK:1013037  View
81151 11404 CVE-2005-0198 URL:http://securitytracker.com/id?1013037  View
81152 11404 CVE-2005-0198 SECUNIA:14057  View
81153 11404 CVE-2005-0198 URL:http://secunia.com/advisories/14057  View
81154 11404 CVE-2005-0198 SECUNIA:14097  View

Related JVN