← Vulnerability feed

Vulnerability record · CVE-2004-1997 · published 5 May 2004

CVE-2004-1997: Kolab groupware server vulnerability

Kolab · Kolab Groupware Server

Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.

4.6 CVSS 2.0 Medium EPSS 0.45% · top 63.2%
4.6CVSS 2.0 base score
0.45%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
16References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://marc.info/?l=bugtraq&m=108377525924422&w=2
http://secunia.com/advisories/11560 ExploitPatchVendor Advisory
http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog
http://www.kolab.org/pipermail/kolab-users/2004-April/000215.html ExploitVendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:052
http://www.osvdb.org/5898
http://www.securityfocus.com/bid/10277 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16068
http://marc.info/?l=bugtraq&m=108377525924422&w=2
http://secunia.com/advisories/11560 ExploitPatchVendor Advisory
http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog
http://www.kolab.org/pipermail/kolab-users/2004-April/000215.html ExploitVendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2004:052
http://www.osvdb.org/5898
http://www.securityfocus.com/bid/10277 PatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16068

Track CVE-2004-1997 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0990Gd graphics library gdlib vulnerabilityInteger overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and …EPSS 28%10.0CVE-2004-1012Carnegie mellon university cyrus imap server vulnerabilityThe argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a c…EPSS 6.0%10.0CVE-2004-1065Openpkg vulnerabilityBuffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a l…EPSS 10%10.0CVE-2004-1013Carnegie mellon university cyrus imap server vulnerabilityThe argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via cer…EPSS 5.8%10.0CVE-2004-1011Carnegie mellon university cyrus imap server vulnerabilityStack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbit…EPSS 5.8%10.0CVE-2004-1019Openpkg improper input validation vulnerabilityThe deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code…EPSS 8.0%10.0CVE-2004-0333Openpkg vulnerabilityBuffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execu…EPSS 24%10.0CVE-2004-0414Cvs vulnerabilityCVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being …EPSS 4.0%

Source: NIST National Vulnerability Database (record CVE-2004-1997), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.