CVE-2005-0198: High severity University of Washington uw-imap vulnerability
A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0198?
CVE-2005-0198 has a medium severity rating due to a logic error in authentication that can allow unauthorized access.
How do I fix CVE-2005-0198?
To fix CVE-2005-0198, update the University of Washington IMAP server to the latest version that addresses this vulnerability.
Who is affected by CVE-2005-0198?
CVE-2005-0198 affects systems running the University of Washington IMAP server with CRAM-MD5 authentication enabled.
What are the potential impacts of CVE-2005-0198?
The potential impacts of CVE-2005-0198 include unauthorized remote authentication which could lead to unauthorized access to email accounts.
When was CVE-2005-0198 discovered?
CVE-2005-0198 was discovered in 2005.