VulnerabilityModified
CVE-2005-2620
grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory.
MEDIUM 5.0EPSS 1.97%
Does this matter?
Lower severity and a low EPSS score (1.97%). Track it; it rarely justifies an emergency change on its own.
Description
grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 1.97% probability · 79th percentile
- CISA KEV
- Not listed
- Affected
- novell/groupwise
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2005-06/0158.html
- http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0858.html
- http://marc.info/?l=bugtraq&m=112431139225724&w=2
- http://securitytracker.com/id?1014247Vendor Advisory
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098073.htmVendor Advisory
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972056.htmPatch
- http://www.osvdb.org/17470
- http://www.securiteam.com/windowsntfocus/5UP0Q0UG0I.html
- http://www.securityfocus.com/bid/13997
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21075
- http://archives.neohapsis.com/archives/bugtraq/2005-06/0158.html
- http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0858.html
- http://marc.info/?l=bugtraq&m=112431139225724&w=2
- http://securitytracker.com/id?1014247Vendor Advisory
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098073.htmVendor Advisory
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972056.htmPatch
- http://www.osvdb.org/17470
- http://www.securiteam.com/windowsntfocus/5UP0Q0UG0I.html
- http://www.securityfocus.com/bid/13997
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21075
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.