CVE-2005-0198

A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5)…

published February 6, 2005

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05091 · 92.3th percentile
Published
2005-02-06T05:00Z
EPSS history
Timeline
  • 06 FEB 05:00Z
    A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5)…
    cvelistv5