Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-5scr-2vxt-e7gz
Vulnerability ID VCID-5scr-2vxt-e7gz
Aliases CVE-2005-0198
Summary UW IMAP contains a vulnerability in the code handling CRAM-MD5 authentication allowing authentication bypass.
Status Published
Exploitability 0.5
Weighted Severity 6.8
Risk 3.4
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
epss 0.26656 https://api.first.org/data/v1/epss?cve=CVE-2005-0198
cvssv2 7.5 https://nvd.nist.gov/vuln/detail/CVE-2005-0198
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-0198.json
https://api.first.org/data/v1/epss?cve=CVE-2005-0198
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0198
http://secunia.com/advisories/14057
http://secunia.com/advisories/14097
http://securitytracker.com/id?1013037
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11306
http://www.gentoo.org/security/en/glsa/glsa-200502-02.xml
http://www.kb.cert.org/vuls/id/702777
http://www.kb.cert.org/vuls/id/CRDY-68QSL5
http://www.mandriva.com/security/advisories?name=MDKSA-2005:026
http://www.redhat.com/support/errata/RHSA-2005-128.html
http://www.securityfocus.com/bid/12391
1617488 https://bugzilla.redhat.com/show_bug.cgi?id=1617488
cpe:2.3:a:university_of_washington:uw-imap:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:university_of_washington:uw-imap:*:*:*:*:*:*:*:*
CVE-2005-0198 https://nvd.nist.gov/vuln/detail/CVE-2005-0198
GLSA-200502-02 https://security.gentoo.org/glsa/200502-02
RHSA-2005:128 https://access.redhat.com/errata/RHSA-2005:128
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2005-0198
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.96301
EPSS Score 0.26656
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:01:28.593251+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200502-02 38.0.0