CVEvulnerability

CVE-2006-0213

4.6 MEDIUM Published 2006-01-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-01-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges.

Affected configurations

• kolab kolab groupware server (<= 2005-12-15 pre2.1) • kolab kolab groupware server 2.0.1 • kolab kolab groupware server 2.0.2

References