What is CVE-2005-0322?

CVE-2005-0322 is a vulnerability in Icewarp Web Mail. Published 2005-05-02.

Is CVE-2005-0322 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Icewarp Web Mail

CVE-2005-0322

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords.

EPSS: 0.002 (15.3th percentile) — read the EPSS interpretation.

Affected products

Icewarp Web_mail — versions 5.3.0, 5.3.2
Merak Mail_server — versions 7.6.0, 7.6.4r
N/a — versions n/a

Public proof-of-concept exploits

Farrhouq/Inpt-report

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2005-0322?: CVE-2005-0322 is a vulnerability in Icewarp Web Mail. Published 2005-05-02.
Is CVE-2005-0322 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.