NVD

Id
65962  
Name
CVE-2005-0198  
Description
A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2010-08-21  
Seq
2005-0198  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
343645 65962 CVE-2005-0198 oval:org.mitre.oval:def:11306  View
343646 65962 CVE-2005-0198 1013037  View
343647 65962 CVE-2005-0198 GLSA-200502-02  View
343648 65962 CVE-2005-0198 VU#702777  View
343649 65962 CVE-2005-0198 http://www.kb.cert.org/vuls/id/CRDY-68QSL5  View
343650 65962 CVE-2005-0198 MDKSA-2005:026  View
343651 65962 CVE-2005-0198 RHSA-2005:128  View
343652 65962 CVE-2005-0198 12391  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61799 JVNDB-2005-000001 UW IMAP サーバの CRAM-MD5 認証を回避される脆弱性 UW IMAP サーバは、CRAM-MD5 認証のロジックの不備のため、UW IMAP サーバの認証方式として CRAM-MD5 を有効にしている場合、有効なアカウントを持たないユーザが認証してしまう脆弱性が存在します。 CVE-2005-0198 11402 CVE-2005-0198 65962 7.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000001.html 2005-01-04 2007-04-01 View