2 results (0.003 seconds)

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

14 Jan 2006 — Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges. • http://kolab.org/security/kolab-vendor-notice-08.txt •

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 2

05 May 2004 — Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges. • http://marc.info/?l=bugtraq&m=108377525924422&w=2 •