CVE-2005-2620: Medium severity Novell GroupWise vulnerability
Published Aug 17, 2005
·Updated
grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory.
Affected Software
3 affected components
Novell GroupWise=6.0
Novell GroupWise=6.5
Novell GroupWise=6.5.2
Remediation
Event History
Aug 17, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2620?
CVE-2005-2620 has a medium severity level due to the exposure of plaintext passwords in memory.
2
How do I fix CVE-2005-2620?
To mitigate CVE-2005-2620, upgrade your Novell GroupWise client to a version that addresses this vulnerability.
3
Which versions of Novell GroupWise are affected by CVE-2005-2620?
CVE-2005-2620 affects Novell GroupWise client versions 5.5 through 6.5.2.
4
What type of attack is possible due to CVE-2005-2620?
CVE-2005-2620 allows attackers to obtain user passwords by accessing process memory through debugging or similar methods.
5
Is CVE-2005-2620 a critical vulnerability?
CVE-2005-2620 is not considered critical, but it poses a risk to user account security due to password exposure.