Unscored CVE-2005-0322 EUVD-2005-0323GHSA-98vg-cwwq-ccc6

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) u…

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords.

References

20050128 Multiple vulnerabilities in Icewarp Web Mail 5.3.0: New holes mailing-list
merak-icewarp-weak-password-encryption(19153) vdb-entry