Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    6 vulnerabilities by kolab

    CVE-2009-4824 (GCVE-0-2009-4824)

    Vulnerability from cvelistv5 – Published: 2010-04-27 15:00 – Updated: 2024-08-07 07:17
    VLAI
    Summary
    Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unspecified impact via vectors related to an "image upload form."
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://files.kolab.org/server/release/kolab-serve… x_refsource_CONFIRM
    http://secunia.com/advisories/37918 third-party-advisoryx_refsource_SECUNIA
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    http://osvdb.org/61301 vdb-entryx_refsource_OSVDB
    http://www.vupen.com/english/advisories/2010/1245 vdb-entryx_refsource_VUPEN
    http://www.securityfocus.com/bid/37465 vdb-entryx_refsource_BID
    Date Public
    2009-12-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T07:17:25.385Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://files.kolab.org/server/release/kolab-server-2.2.3/sources/release-notes.txt"
              },
              {
                "name": "37918",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/37918"
              },
              {
                "name": "MDVSA-2010:108",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:108"
              },
              {
                "name": "61301",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://osvdb.org/61301"
              },
              {
                "name": "ADV-2010-1245",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2010/1245"
              },
              {
                "name": "37465",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/37465"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2009-12-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unspecified impact via vectors related to an \"image upload form.\""
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2010-06-05T09:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://files.kolab.org/server/release/kolab-server-2.2.3/sources/release-notes.txt"
            },
            {
              "name": "37918",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/37918"
            },
            {
              "name": "MDVSA-2010:108",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:108"
            },
            {
              "name": "61301",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://osvdb.org/61301"
            },
            {
              "name": "ADV-2010-1245",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2010/1245"
            },
            {
              "name": "37465",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/37465"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2009-4824",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Unspecified vulnerability in Kolab Webclient before 1.2.0 in Kolab Server before 2.2.3 allows attackers to have an unspecified impact via vectors related to an \"image upload form.\""
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://files.kolab.org/server/release/kolab-server-2.2.3/sources/release-notes.txt",
                  "refsource": "CONFIRM",
                  "url": "http://files.kolab.org/server/release/kolab-server-2.2.3/sources/release-notes.txt"
                },
                {
                  "name": "37918",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/37918"
                },
                {
                  "name": "MDVSA-2010:108",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:108"
                },
                {
                  "name": "61301",
                  "refsource": "OSVDB",
                  "url": "http://osvdb.org/61301"
                },
                {
                  "name": "ADV-2010-1245",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2010/1245"
                },
                {
                  "name": "37465",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/37465"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2009-4824",
        "datePublished": "2010-04-27T15:00:00.000Z",
        "dateReserved": "2010-04-27T00:00:00.000Z",
        "dateUpdated": "2024-08-07T07:17:25.385Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2008-4165 (GCVE-0-2008-4165)

    Vulnerability from cvelistv5 – Published: 2008-09-22 18:00 – Updated: 2024-08-07 10:08
    VLAI
    Summary
    admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    Date Public
    2008-09-02 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T10:08:34.922Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "31165",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/31165"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://qa.mandriva.com/show_bug.cgi?id=43434"
              },
              {
                "name": "kolab-logfile-information-disclosure(45124)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45124"
              },
              {
                "name": "MDVSA-2008:193",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:193"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2008-09-02T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-08-07T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "31165",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/31165"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://qa.mandriva.com/show_bug.cgi?id=43434"
            },
            {
              "name": "kolab-logfile-information-disclosure(45124)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45124"
            },
            {
              "name": "MDVSA-2008:193",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:193"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2008-4165",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "admin/user/create_user.php in Kolab Groupware Server 1.0.0 places a user password in an HTTP GET request, which allows local administrators, and possibly remote attackers, to obtain cleartext passwords by reading the ssl_access_log file or the referer string."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "31165",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/31165"
                },
                {
                  "name": "https://qa.mandriva.com/show_bug.cgi?id=43434",
                  "refsource": "CONFIRM",
                  "url": "https://qa.mandriva.com/show_bug.cgi?id=43434"
                },
                {
                  "name": "kolab-logfile-information-disclosure(45124)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45124"
                },
                {
                  "name": "MDVSA-2008:193",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/en/security/advisories?name=MDVSA-2008:193"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2008-4165",
        "datePublished": "2008-09-22T18:00:00.000Z",
        "dateReserved": "2008-09-22T00:00:00.000Z",
        "dateUpdated": "2024-08-07T10:08:34.922Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2007-4510 (GCVE-0-2007-4510)

    Vulnerability from cvelistv5 – Published: 2007-08-23 19:00 – Updated: 2024-08-07 15:01
    VLAI
    Summary
    ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c. NOTE: some of these details are obtained from third party information.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://security.gentoo.org/glsa/glsa-200709-14.xml vendor-advisoryx_refsource_GENTOO
    http://secunia.com/advisories/26552 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/26822 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/26916 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/25398 vdb-entryx_refsource_BID
    http://secunia.com/advisories/26683 third-party-advisoryx_refsource_SECUNIA
    https://www.redhat.com/archives/fedora-package-an… vendor-advisoryx_refsource_FEDORA
    http://www.debian.org/security/2007/dsa-1366 vendor-advisoryx_refsource_DEBIAN
    http://kolab.org/security/kolab-vendor-notice-17.txt x_refsource_CONFIRM
    http://securityreason.com/securityalert/3054 third-party-advisoryx_refsource_SREASON
    http://www.vupen.com/english/advisories/2008/0924… vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/26530 third-party-advisoryx_refsource_SECUNIA
    https://wwws.clamav.net/bugzilla/show_bug.cgi?id=611 x_refsource_CONFIRM
    http://www.trustix.org/errata/2007/0026/ vendor-advisoryx_refsource_TRUSTIX
    http://secunia.com/advisories/29420 third-party-advisoryx_refsource_SECUNIA
    http://www.novell.com/linux/security/advisories/2… vendor-advisoryx_refsource_SUSE
    http://lists.apple.com/archives/security-announce… vendor-advisoryx_refsource_APPLE
    https://wwws.clamav.net/bugzilla/show_bug.cgi?id=582 x_refsource_CONFIRM
    http://secunia.com/advisories/26751 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/26654 third-party-advisoryx_refsource_SECUNIA
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://docs.info.apple.com/article.html?artnum=307562 x_refsource_CONFIRM
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    http://sourceforge.net/project/shownotes.php?rele… x_refsource_CONFIRM
    http://www.vupen.com/english/advisories/2007/2952 vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/26674 third-party-advisoryx_refsource_SECUNIA
    Date Public
    2007-08-21 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T15:01:09.587Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "clamav-rtf-dos(36173)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36173"
              },
              {
                "name": "GLSA-200709-14",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
                  "x_transferred"
                ],
                "url": "http://security.gentoo.org/glsa/glsa-200709-14.xml"
              },
              {
                "name": "26552",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26552"
              },
              {
                "name": "26822",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26822"
              },
              {
                "name": "26916",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26916"
              },
              {
                "name": "25398",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/25398"
              },
              {
                "name": "26683",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26683"
              },
              {
                "name": "FEDORA-2007-2050",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
                  "x_transferred"
                ],
                "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00104.html"
              },
              {
                "name": "DSA-1366",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
                  "x_transferred"
                ],
                "url": "http://www.debian.org/security/2007/dsa-1366"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://kolab.org/security/kolab-vendor-notice-17.txt"
              },
              {
                "name": "3054",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/3054"
              },
              {
                "name": "ADV-2008-0924",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2008/0924/references"
              },
              {
                "name": "26530",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26530"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=611"
              },
              {
                "name": "2007-0026",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_TRUSTIX",
                  "x_transferred"
                ],
                "url": "http://www.trustix.org/errata/2007/0026/"
              },
              {
                "name": "29420",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/29420"
              },
              {
                "name": "SUSE-SR:2007:018",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_SUSE",
                  "x_transferred"
                ],
                "url": "http://www.novell.com/linux/security/advisories/2007_18_sr.html"
              },
              {
                "name": "APPLE-SA-2008-03-18",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_APPLE",
                  "x_transferred"
                ],
                "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=582"
              },
              {
                "name": "26751",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26751"
              },
              {
                "name": "26654",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26654"
              },
              {
                "name": "clamav-clihtmlnormalise-dos(36177)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36177"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://docs.info.apple.com/article.html?artnum=307562"
              },
              {
                "name": "MDKSA-2007:172",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:172"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://sourceforge.net/project/shownotes.php?release_id=533658"
              },
              {
                "name": "ADV-2007-2952",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2007/2952"
              },
              {
                "name": "26674",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/26674"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2007-08-21T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c.  NOTE: some of these details are obtained from third party information."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-28T12:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "clamav-rtf-dos(36173)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36173"
            },
            {
              "name": "GLSA-200709-14",
              "tags": [
                "vendor-advisory",
                "x_refsource_GENTOO"
              ],
              "url": "http://security.gentoo.org/glsa/glsa-200709-14.xml"
            },
            {
              "name": "26552",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26552"
            },
            {
              "name": "26822",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26822"
            },
            {
              "name": "26916",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26916"
            },
            {
              "name": "25398",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/25398"
            },
            {
              "name": "26683",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26683"
            },
            {
              "name": "FEDORA-2007-2050",
              "tags": [
                "vendor-advisory",
                "x_refsource_FEDORA"
              ],
              "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00104.html"
            },
            {
              "name": "DSA-1366",
              "tags": [
                "vendor-advisory",
                "x_refsource_DEBIAN"
              ],
              "url": "http://www.debian.org/security/2007/dsa-1366"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://kolab.org/security/kolab-vendor-notice-17.txt"
            },
            {
              "name": "3054",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/3054"
            },
            {
              "name": "ADV-2008-0924",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2008/0924/references"
            },
            {
              "name": "26530",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26530"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=611"
            },
            {
              "name": "2007-0026",
              "tags": [
                "vendor-advisory",
                "x_refsource_TRUSTIX"
              ],
              "url": "http://www.trustix.org/errata/2007/0026/"
            },
            {
              "name": "29420",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/29420"
            },
            {
              "name": "SUSE-SR:2007:018",
              "tags": [
                "vendor-advisory",
                "x_refsource_SUSE"
              ],
              "url": "http://www.novell.com/linux/security/advisories/2007_18_sr.html"
            },
            {
              "name": "APPLE-SA-2008-03-18",
              "tags": [
                "vendor-advisory",
                "x_refsource_APPLE"
              ],
              "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=582"
            },
            {
              "name": "26751",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26751"
            },
            {
              "name": "26654",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26654"
            },
            {
              "name": "clamav-clihtmlnormalise-dos(36177)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36177"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://docs.info.apple.com/article.html?artnum=307562"
            },
            {
              "name": "MDKSA-2007:172",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:172"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://sourceforge.net/project/shownotes.php?release_id=533658"
            },
            {
              "name": "ADV-2007-2952",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2007/2952"
            },
            {
              "name": "26674",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/26674"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2007-4510",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (application crash) via (1) a crafted RTF file, which triggers a NULL dereference in the cli_scanrtf function in libclamav/rtf.c; or (2) a crafted HTML document with a data: URI, which triggers a NULL dereference in the cli_html_normalise function in libclamav/htmlnorm.c.  NOTE: some of these details are obtained from third party information."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "clamav-rtf-dos(36173)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36173"
                },
                {
                  "name": "GLSA-200709-14",
                  "refsource": "GENTOO",
                  "url": "http://security.gentoo.org/glsa/glsa-200709-14.xml"
                },
                {
                  "name": "26552",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26552"
                },
                {
                  "name": "26822",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26822"
                },
                {
                  "name": "26916",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26916"
                },
                {
                  "name": "25398",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/25398"
                },
                {
                  "name": "26683",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26683"
                },
                {
                  "name": "FEDORA-2007-2050",
                  "refsource": "FEDORA",
                  "url": "https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00104.html"
                },
                {
                  "name": "DSA-1366",
                  "refsource": "DEBIAN",
                  "url": "http://www.debian.org/security/2007/dsa-1366"
                },
                {
                  "name": "http://kolab.org/security/kolab-vendor-notice-17.txt",
                  "refsource": "CONFIRM",
                  "url": "http://kolab.org/security/kolab-vendor-notice-17.txt"
                },
                {
                  "name": "3054",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/3054"
                },
                {
                  "name": "ADV-2008-0924",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2008/0924/references"
                },
                {
                  "name": "26530",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26530"
                },
                {
                  "name": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=611",
                  "refsource": "CONFIRM",
                  "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=611"
                },
                {
                  "name": "2007-0026",
                  "refsource": "TRUSTIX",
                  "url": "http://www.trustix.org/errata/2007/0026/"
                },
                {
                  "name": "29420",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/29420"
                },
                {
                  "name": "SUSE-SR:2007:018",
                  "refsource": "SUSE",
                  "url": "http://www.novell.com/linux/security/advisories/2007_18_sr.html"
                },
                {
                  "name": "APPLE-SA-2008-03-18",
                  "refsource": "APPLE",
                  "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
                },
                {
                  "name": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=582",
                  "refsource": "CONFIRM",
                  "url": "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=582"
                },
                {
                  "name": "26751",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26751"
                },
                {
                  "name": "26654",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26654"
                },
                {
                  "name": "clamav-clihtmlnormalise-dos(36177)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36177"
                },
                {
                  "name": "http://docs.info.apple.com/article.html?artnum=307562",
                  "refsource": "CONFIRM",
                  "url": "http://docs.info.apple.com/article.html?artnum=307562"
                },
                {
                  "name": "MDKSA-2007:172",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2007:172"
                },
                {
                  "name": "http://sourceforge.net/project/shownotes.php?release_id=533658",
                  "refsource": "CONFIRM",
                  "url": "http://sourceforge.net/project/shownotes.php?release_id=533658"
                },
                {
                  "name": "ADV-2007-2952",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2007/2952"
                },
                {
                  "name": "26674",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/26674"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2007-4510",
        "datePublished": "2007-08-23T19:00:00.000Z",
        "dateReserved": "2007-08-23T00:00:00.000Z",
        "dateUpdated": "2024-08-07T15:01:09.587Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2005-4828 (GCVE-0-2005-4828)

    Vulnerability from cvelistv5 – Published: 2007-02-12 11:00 – Updated: 2024-08-08 00:01
    VLAI
    Summary
    Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this might not be a vulnerability.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://kolab.org/security/kolab-vendor-notice-07.txt x_refsource_CONFIRM
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
    http://www.osvdb.org/22538 vdb-entryx_refsource_OSVDB
    Date Public
    2005-12-22 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-08T00:01:23.368Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://kolab.org/security/kolab-vendor-notice-07.txt"
              },
              {
                "name": "MDKSA-2006:013",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRIVA",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:013"
              },
              {
                "name": "22538",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/22538"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2005-12-22T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a \".\" in the wrong place, which causes kolabfilter to add another \".\", which might break clear-text signatures and attachments.  NOTE: it is not clear whether this issue crosses privilege boundaries, so this might not be a vulnerability."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2007-10-18T09:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://kolab.org/security/kolab-vendor-notice-07.txt"
            },
            {
              "name": "MDKSA-2006:013",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRIVA"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:013"
            },
            {
              "name": "22538",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/22538"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2005-4828",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a \".\" in the wrong place, which causes kolabfilter to add another \".\", which might break clear-text signatures and attachments.  NOTE: it is not clear whether this issue crosses privilege boundaries, so this might not be a vulnerability."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://kolab.org/security/kolab-vendor-notice-07.txt",
                  "refsource": "CONFIRM",
                  "url": "http://kolab.org/security/kolab-vendor-notice-07.txt"
                },
                {
                  "name": "MDKSA-2006:013",
                  "refsource": "MANDRIVA",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:013"
                },
                {
                  "name": "22538",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/22538"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2005-4828",
        "datePublished": "2007-02-12T11:00:00.000Z",
        "dateReserved": "2007-02-12T00:00:00.000Z",
        "dateUpdated": "2024-08-08T00:01:23.368Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-0213 (GCVE-0-2006-0213)

    Vulnerability from cvelistv5 – Published: 2006-01-14 01:00 – Updated: 2024-08-07 16:25
    VLAI
    Summary
    Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://secunia.com/advisories/18438 third-party-advisoryx_refsource_SECUNIA
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.vupen.com/english/advisories/2006/0186 vdb-entryx_refsource_VUPEN
    http://kolab.org/security/kolab-vendor-notice-08.txt x_refsource_CONFIRM
    http://www.osvdb.org/22381 vdb-entryx_refsource_OSVDB
    Date Public
    2006-01-13 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T16:25:34.017Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "18438",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/18438"
              },
              {
                "name": "kolab-smtp-logging(24123)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24123"
              },
              {
                "name": "ADV-2006-0186",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/0186"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://kolab.org/security/kolab-vendor-notice-08.txt"
              },
              {
                "name": "22381",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/22381"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-01-13T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-19T15:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "18438",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/18438"
            },
            {
              "name": "kolab-smtp-logging(24123)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24123"
            },
            {
              "name": "ADV-2006-0186",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/0186"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://kolab.org/security/kolab-vendor-notice-08.txt"
            },
            {
              "name": "22381",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/22381"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-0213",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "18438",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/18438"
                },
                {
                  "name": "kolab-smtp-logging(24123)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24123"
                },
                {
                  "name": "ADV-2006-0186",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/0186"
                },
                {
                  "name": "http://kolab.org/security/kolab-vendor-notice-08.txt",
                  "refsource": "CONFIRM",
                  "url": "http://kolab.org/security/kolab-vendor-notice-08.txt"
                },
                {
                  "name": "22381",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/22381"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-0213",
        "datePublished": "2006-01-14T01:00:00.000Z",
        "dateReserved": "2006-01-14T00:00:00.000Z",
        "dateUpdated": "2024-08-07T16:25:34.017Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2004-1997 (GCVE-0-2004-1997)

    Vulnerability from cvelistv5 – Published: 2005-05-10 04:00 – Updated: 2024-08-08 01:07
    VLAI
    Summary
    Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRAKE
    http://marc.info/?l=bugtraq&m=108377525924422&w=2 vendor-advisoryx_refsource_OPENPKG
    http://www.securityfocus.com/bid/10277 vdb-entryx_refsource_BID
    http://secunia.com/advisories/11560 third-party-advisoryx_refsource_SECUNIA
    http://www.osvdb.org/5898 vdb-entryx_refsource_OSVDB
    http://www.erfrakon.de/projects/kolab/download/ko… x_refsource_CONFIRM
    http://www.kolab.org/pipermail/kolab-users/2004-A… mailing-listx_refsource_MLIST
    Date Public
    2004-04-20 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-08T01:07:49.234Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "kolab-root-password-plaintext(16068)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16068"
              },
              {
                "name": "MDKSA-2004:052",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_MANDRAKE",
                  "x_transferred"
                ],
                "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2004:052"
              },
              {
                "name": "OpenPKG-SA-2004.019",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_OPENPKG",
                  "x_transferred"
                ],
                "url": "http://marc.info/?l=bugtraq\u0026m=108377525924422\u0026w=2"
              },
              {
                "name": "10277",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/10277"
              },
              {
                "name": "11560",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/11560"
              },
              {
                "name": "5898",
                "tags": [
                  "vdb-entry",
                  "x_refsource_OSVDB",
                  "x_transferred"
                ],
                "url": "http://www.osvdb.org/5898"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog"
              },
              {
                "name": "[kolab-users] 20040420 Possible Kolab LDAP configuration information disclosure",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.kolab.org/pipermail/kolab-users/2004-April/000215.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2004-04-20T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-10T14:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "kolab-root-password-plaintext(16068)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16068"
            },
            {
              "name": "MDKSA-2004:052",
              "tags": [
                "vendor-advisory",
                "x_refsource_MANDRAKE"
              ],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2004:052"
            },
            {
              "name": "OpenPKG-SA-2004.019",
              "tags": [
                "vendor-advisory",
                "x_refsource_OPENPKG"
              ],
              "url": "http://marc.info/?l=bugtraq\u0026m=108377525924422\u0026w=2"
            },
            {
              "name": "10277",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/10277"
            },
            {
              "name": "11560",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/11560"
            },
            {
              "name": "5898",
              "tags": [
                "vdb-entry",
                "x_refsource_OSVDB"
              ],
              "url": "http://www.osvdb.org/5898"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog"
            },
            {
              "name": "[kolab-users] 20040420 Possible Kolab LDAP configuration information disclosure",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.kolab.org/pipermail/kolab-users/2004-April/000215.html"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2004-1997",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "kolab-root-password-plaintext(16068)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16068"
                },
                {
                  "name": "MDKSA-2004:052",
                  "refsource": "MANDRAKE",
                  "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2004:052"
                },
                {
                  "name": "OpenPKG-SA-2004.019",
                  "refsource": "OPENPKG",
                  "url": "http://marc.info/?l=bugtraq\u0026m=108377525924422\u0026w=2"
                },
                {
                  "name": "10277",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/10277"
                },
                {
                  "name": "11560",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/11560"
                },
                {
                  "name": "5898",
                  "refsource": "OSVDB",
                  "url": "http://www.osvdb.org/5898"
                },
                {
                  "name": "http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog",
                  "refsource": "CONFIRM",
                  "url": "http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog"
                },
                {
                  "name": "[kolab-users] 20040420 Possible Kolab LDAP configuration information disclosure",
                  "refsource": "MLIST",
                  "url": "http://www.kolab.org/pipermail/kolab-users/2004-April/000215.html"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2004-1997",
        "datePublished": "2005-05-10T04:00:00.000Z",
        "dateReserved": "2005-05-04T00:00:00.000Z",
        "dateUpdated": "2024-08-08T01:07:49.234Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }