First published: Sat Dec 31 2005(Updated: )
Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this might not be a vulnerability.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Kolab Kolab Groupware Server | =2.0.0 | |
Kolab Kolab Groupware Server | =2.0.1 | |
Kolab Groupware Server | =2.0.0 | |
Kolab Groupware Server | =2.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-4828 has not been explicitly assigned a severity rating, but it may pose risks related to the integrity of email signatures and attachments.
The recommended fix for CVE-2005-4828 involves upgrading to a newer version of Kolab Server that addresses this vulnerability.
CVE-2005-4828 affects Kolab Server versions 2.0.0 and 2.0.1.
CVE-2005-4828 could potentially enable attacks that manipulate email content, impacting clear-text signatures and breaking attachments.
It remains unclear whether CVE-2005-4828 crosses privilege boundaries, making its full impact uncertain.