CVE-2006-2738: High severity open-xchange open-xchange vulnerability
The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfile for the ldap-server, which allows remote attackers to access any server where the default has not been changed.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2738?
CVE-2006-2738 is classified as a high severity vulnerability due to its ability to allow remote attackers access without authentication.
How do I fix CVE-2006-2738?
To fix CVE-2006-2738, change the default static username and password for the ldap-server in the initfile to secure credentials.
Which versions of Open-Xchange are affected by CVE-2006-2738?
CVE-2006-2738 affects Open-Xchange versions 0.8.2 and earlier, including version 0.8.1.6.
What type of vulnerability is CVE-2006-2738?
CVE-2006-2738 is a security vulnerability related to improper authentication due to using static credentials.
Can I still use Open-Xchange 0.8.2 safely with CVE-2006-2738?
Using Open-Xchange 0.8.2 without addressing CVE-2006-2738 poses a significant security risk and should not be recommended.