Lucene search

K
cveMitreCVE-2005-2620
HistoryAug 17, 2005 - 4:00 a.m.

CVE-2005-2620

2005-08-1704:00:00
mitre
web.nvd.nist.gov
37
cve-2005-2620
novell
groupwise
client security
plaintext password
vulnerability
memory
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.008

Percentile

81.4%

grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory.

Affected configurations

Nvd
Node
novellgroupwiseMatch6.0
OR
novellgroupwiseMatch6.5
OR
novellgroupwiseMatch6.5.2
VendorProductVersionCPE
novellgroupwise6.0cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*
novellgroupwise6.5cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*
novellgroupwise6.5.2cpe:2.3:a:novell:groupwise:6.5.2:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.5

Confidence

Low

EPSS

0.008

Percentile

81.4%

Related for CVE-2005-2620