CVE-2005-2962: Ntlmaps

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The post-installation script for ntlmaps before 0.9.9 sets world-readable permissions for the configuration file, which allows local users to obtain the username and password.

Affected products

• Ntlmaps Ntlmaps: up to and including 0.9.9

Published 2005-09-30. Last modified 2026-06-16.