CVE-2005-0198

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14057
http://secunia.com/advisories/14097
http://securitytracker.com/id?1013037
http://www.gentoo.org/security/en/glsa/glsa-200502-02.xmlPatch
http://www.kb.cert.org/vuls/id/702777Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/CRDY-68QSL5Patch, US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2005:026
http://www.redhat.com/support/errata/RHSA-2005-128.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/12391
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11306
http://secunia.com/advisories/14057
http://secunia.com/advisories/14097
http://securitytracker.com/id?1013037
http://www.gentoo.org/security/en/glsa/glsa-200502-02.xmlPatch
http://www.kb.cert.org/vuls/id/702777Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/CRDY-68QSL5Patch, US Government Resource
http://www.mandriva.com/security/advisories?name=MDKSA-2005:026
http://www.redhat.com/support/errata/RHSA-2005-128.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/12391
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11306

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-01999.8Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (a CVE-2005-02007.5TikiWiki before 1.8.5 does not properly validate files that have been uploaded to the temp directory, which could allow remote attackers to CVE-2005-02012.1D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen o CVE-2005-02025.0Directory traversal vulnerability in the true_path function in private.py for Mailman 2.1.5 and earlier allows remote attackers to read arbi CVE-2005-02042.1Linux kernel before 2.6.9, when running on the AMD64 and Intel EM64T architectures, allows local users to write to privileged IO ports via t CVE-2005-02054.6KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a d CVE-2005-02067.5The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux d CVE-2005-02072.1Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT.CVE-2005-02085.0The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service (application crash) via malformed HTML t CVE-2005-02097.8Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments.CVE-2005-02104.9Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that CVE-2005-02117.5Buffer overflow in wccp.c in Squid 2.5 before 2.5.STABLE7 allows remote attackers to cause a denial of service and possibly execute arbitrar