uw-imap: authentication bypass
| Package(s): | uw-imap imap | CVE #(s): | CAN-2005-0198 | ||||||||||||||||
| Created: | February 2, 2005 | Updated: | March 1, 2005 | ||||||||||||||||
| Description: | The uw-imap package, prior to version 2004b, contains a vulnerability which can enable a remote attacker to bypass the authentication mechanism. This bug only affects CRAM-MD5 authentication, which is not enabled on all distributions. | ||||||||||||||||||
| Alerts: |
| ||||||||||||||||||
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.