CVE-2004-1997

Description

Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16068

http://www.securityfocus.com/bid/10277

http://www.osvdb.org/5898

http://www.mandriva.com/security/advisories?name=MDKSA-2004:052

http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog

http://marc.info/?l=bugtraq&m=108377525924422&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3