CVE-2005-4828

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-31 · updated 2026-06-16

Description

Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this might not be a vulnerability.

Affected products

Kolab Groupware Server: 2.0.0, 2.0.1

References

http://kolab.org/security/kolab-vendor-notice-07.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2006:013
http://www.osvdb.org/22538
http://kolab.org/security/kolab-vendor-notice-07.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2006:013
http://www.osvdb.org/22538

Get alerted when CVE-2005-4828 or the next vulnerability affects your stack