CVE-2005-3532
High
Description
authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pam_tally, does not call the pam_acct_mgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled.
SeverityHigh
CVSS7.5
Exploit probability—
ProductDouble Precision Incorporated Courier Mail Server
PublishedDec 11, 2005
First seenDec 11, 2005
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| double_precision_incorporated courier_mail_server | 0.37.3, 0.46, 0.47, 0.48, 0.48.1, 0.48.2, 0.49.0, 0.50.0, 0.52.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.