University Of Washington IMAP Server CRAM-MD5 Remote Authentication Bypass Vulnerability

University Of Washington IMAP Server CRAM-MD5 Remote Authentication Bypass Vulnerability

References:

RHSA-2005:128-06 - Moderate: imap security update (RedHat)
UW IMAP Server Documentation - Release Notes (University of Washington)
UW-IMAP Homepage (University of Washington)
Vulnerability Note VU#702777 - UW-imapd fails to properly authenticate users (US-CERT)

Privacy Statement
Copyright 2010, SecurityFocus