CVE-2005-0198 Auth bypass in n/a

High 7.5 Published 6 Feb 2005 Updated 7 Aug 2024

Remote attackers can bypass authentication and log in as arbitrary users if CRAM-MD5 is enabled in the UW-IMAP server.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2005-0198?

CVE-2005-0198 is a high-severity authentication bypass vulnerability in n/a, published on 6 Feb 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.

Which versions are affected by CVE-2005-0198?

It affects 1 product.

Linux distribution packages (16)

`imap` Red Hat:enterprise_linux:3::as	All versions	`1:2002d-11`
`imap-debuginfo` Red Hat:enterprise_linux:3::as	All versions	`1:2002d-11`
`imap-devel` Red Hat:enterprise_linux:3::as	All versions	`1:2002d-11`
`imap-utils` Red Hat:enterprise_linux:3::as	All versions	`1:2002d-11`
`imap` Red Hat:enterprise_linux:3::desktop	All versions	`1:2002d-11`
`imap-debuginfo` Red Hat:enterprise_linux:3::desktop	All versions	`1:2002d-11`
`imap-devel` Red Hat:enterprise_linux:3::desktop	All versions	`1:2002d-11`
`imap-utils` Red Hat:enterprise_linux:3::desktop	All versions	`1:2002d-11`
`imap` Red Hat:enterprise_linux:3::es	All versions	`1:2002d-11`
`imap-debuginfo` Red Hat:enterprise_linux:3::es	All versions	`1:2002d-11`
`imap-devel` Red Hat:enterprise_linux:3::es	All versions	`1:2002d-11`
`imap-utils` Red Hat:enterprise_linux:3::es	All versions	`1:2002d-11`
`imap` Red Hat:enterprise_linux:3::ws	All versions	`1:2002d-11`
`imap-debuginfo` Red Hat:enterprise_linux:3::ws	All versions	`1:2002d-11`
`imap-devel` Red Hat:enterprise_linux:3::ws	All versions	`1:2002d-11`
`imap-utils` Red Hat:enterprise_linux:3::ws	All versions	`1:2002d-11`

Products include University of Washington Uw-Imap.

How do I fix CVE-2005-0198?

Apply the vendor's patch.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2005-0198 being exploited?

There is no known exploitation of CVE-2005-0198 in the wild and no public exploit code.

Sources

Also known as AZL-37052, AZL-37157, DEBIAN-CVE-2005-0198, GHSA-jj66-r59x-7j8w, RHSA-2005:128.