CVE-2004-1997: Medium severity kolab kolab groupware server vulnerability
Published May 5, 2004
·Updated
Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.
Affected Software
8 affected components
Kolab Kolab Groupware Server=1.0
Kolab Kolab Groupware Server=1.0.1
Kolab Kolab Groupware Server=1.0.3
Kolab Kolab Groupware Server=1.0.5
Kolab Kolab Groupware Server=1.0.6
Kolab Kolab Groupware Server=1.0.7
Kolab Kolab Groupware Server=1.0.8
Openpkg Openpkg=2.0
Remediation
Patch Available
Patch Available
Event History
May 5, 2004
CVE Published
04:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1997?
CVE-2004-1997 is considered a high severity vulnerability due to the exposure of plaintext passwords.
2
How do I fix CVE-2004-1997?
To fix CVE-2004-1997, ensure that the slapd.conf file is not world-readable and consider using hashed passwords instead.
3
What systems are affected by CVE-2004-1997?
CVE-2004-1997 affects multiple versions of Kolab Groupware Server and Openpkg.
4
What are the risks of CVE-2004-1997?
The risk of CVE-2004-1997 is that local users can read the configuration file and gain unauthorized access to sensitive information.
5
When was CVE-2004-1997 reported?
CVE-2004-1997 was reported in April 2004.