Unscored severity · published Jan 14, 2006
CVE-2006-0213
Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KG
Kolab Groupware Server · Kolab
through 2005-12-15_pre2.1; 2.0.1; 2.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0213
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0213
Patch
http://kolab.org/security/kolab-vendor-notice-08.txt
Patch
http://secunia.com/advisories/18438
www.osvdb.org
http://www.osvdb.org/22381
www.vupen.com
http://www.vupen.com/english/advisories/2006/0186
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/24123
More from Kolab Groupware Server
–
CVE-2008-4165
admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to…
–
CVE-2005-4828
Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break…
–
CVE-2004-1997
Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges