CVE-2006-2738

CVE-2006-2738 describes a critical vulnerability in Open-Xchange 0.8.2 and earlier, where the LDAP server component uses a static, default username and password with a valid login shell. This flaw allows unauthenticated remote attackers to gain unauthorized access to any server where these default credentials have not been changed. With a CVSS score of 7.5, this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (e.g., Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.