CVE-2004-1997

MEDIUM 4.6CVE-2004-1997 · Published 05/05/2004 · updated 16/06/2026

In short

CVE-2004-1997 is a MEDIUM (CVSS 4.6) vulnerability affecting kolab groupware server (kolab), openpkg (openpkg).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 39.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
kolab groupware server kolab	`= 1.0= 1.0.1= 1.0.3= 1.0.5= 1.0.6= 1.0.7= 1.0.8`	No fix yet
openpkg openpkg	`= 2.0`	No fix yet

Description

Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.

References

marc.info
secunia.com/advisories/11560 · Exploit
erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog
kolab.org/pipermail/kolab-users/2004-April/000215.html · Exploit
mandriva.com/security/advisories
osvdb.org/5898
securityfocus.com/bid/10277 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/16068

More vulnerabilities in kolab groupware server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free