Description
Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.
References
- kolab-root-password-plaintext(16068) vdb-entry
- MDKSA-2004:052 vendor-advisory
- OpenPKG-SA-2004.019 vendor-advisory
- 10277 vdb-entry
- 11560 third-party-advisory
- 5898 vdb-entry
- http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog
- [kolab-users] 20040420 Possible Kolab LDAP configuration information disclosure mailing-list