Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A logic error in the CRAM-MD5 code for the University of Washington IMAP (UW-IMAP) server, when Challenge-Response Authentication Mechanism with MD5 (CRAM-MD5) is enabled, does not properly enforce all the required conditions for successful authentication, which allows remote attackers to authenticate as arbitrary users.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
University Of Washington IMAP Server CRAM-MD5远程身份验证绕过漏洞
Vulnerability Description
University of Washington IMAP (UW-IMAP) server的CRAM-MD5代码中存在逻辑错误，在启用"口令-应答认证机制"MD5 (CRAM-MD5)的情况下，并不能针对成功的身份验证正确强制所有要求的条件，从而远程攻击者可以作为任意用户进行身份验证。
CVSS Information
N/A
Vulnerability Type
N/A