PT-2005-5489 · Kolab · Kolab Server

Publicado 2005-12-31 · Atualizado 2010-04-02 · CVE-2005-4828

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Kolab Server versions 2.0.0 through 2.0.1

Description The issue is related to the handling of large emails with a "." in the wrong place, which causes kolabfilter to add another ".", potentially breaking clear-text signatures and attachments. It is unclear whether this issue crosses privilege boundaries.

Recommendations For Kolab Server versions 2.0.0 through 2.0.1, consider restricting the handling of large emails or the use of kolabfilter until a proper fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-4828

Produtos afetados

Kolab Server

Referências · 5

• 🔥 http://kolab.org/security/kolab-vendor-notice-07.txt · Exploit
• http://mandriva.com/security/advisories?name=MDKSA-2006:013 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4828 · Nota de Segurança
• http://osvdb.org/22538 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4828 · Nota