BID:10277

Kolab Groupware Server OpenLDAP Plaintext Password Storage Vulnerability

Info

Kolab Groupware Server OpenLDAP Plaintext Password Storage Vulnerability

Bugtraq ID:	10277
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	May 05 2004 12:00AM
Updated:	May 05 2004 12:00AM
Credit:	Discovery is credited to Luca Villani <[email protected]>.
Vulnerable:	OpenPKG OpenPKG 2.0 Kolab Kolab Groupware Server 1.0.8 Kolab Kolab Groupware Server 1.0.7 Kolab Kolab Groupware Server 1.0.6 Kolab Kolab Groupware Server 1.0.5 Kolab Kolab Groupware Server 1.0.3 Kolab Kolab Groupware Server 1.0.1 Kolab Kolab Groupware Server 1.0 + Mandriva Linux Mandrake 10.0 AMD64 + Mandriva Linux Mandrake 10.0

Not Vulnerable:	Kolab Kolab Groupware Server 1.0 -20040426

Discussion

Kolab Groupware Server OpenLDAP Plaintext Password Storage Vulnerability

It has been reported that Kolab groupware server is prone to a plaintext password storage vulnerability that may allow an attacker to disclose OpenLDAP passwords that are stored in plaintext format.

Kolab Server versions 1.0.8 and prior may be prone to this issue.

Exploit / POC

Kolab Groupware Server OpenLDAP Plaintext Password Storage Vulnerability

No exploit is required.

Solution / Fix

Kolab Groupware Server OpenLDAP Plaintext Password Storage Vulnerability

Solution:
Mandrake has released a security advisory (MDKSA-2004:052) and updates to address this issue in Mandrake Linux 10. Users are advised to see the referenced advisory for further details regarding obtaining and applying fixes.

OpenPKG has released an advisory OpenPKG-SA-2004.019 to address this issue. Please see the referenced advisory for more information.

The vendor has fixed this issue in Kolab 1.0-20040426:

Kolab Kolab Groupware Server 1.0