Vulnerability in Kolab Groupware Server

CVE-2006-0213

Kolab Server 2.0.1, 2.0.2 and development versions pre-2.1-20051215 and earlier, when authenticating users via secure SMTP, stores authentication credentials in plaintext in the postfix.log file, which allows local users to gain privileges.

EPSS: 0.003 (26.6th percentile) — read the EPSS interpretation.

Affected products

References