7.2
CVSSv2

CVE-2005-0322

Published: 02/05/2005 Updated: 11/07/2017
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 and Mail Server 7.6.4r with Icewarp Mail Server 5.3.2 uses weak encryption in the (1) users.cfg, (2) settings.cfg, (3) users.dat or (4) user.dat files, which allows local users to extract the passwords.

Vulnerable Product Search on Vulmon Subscribe to Product

icewarp web mail 5.3.0

icewarp web mail 5.3.2

merak mail server 7.6.0

merak mail server 7.6.4r