PT-2005-2926 · Novell · Novell Netmail

Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-1976

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Baixa

Vetor base

AV:L/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Novell NetMail versions 3.5.2a through 3.5.2c

Description The issue allows users or groups with a specific ID to potentially execute arbitrary code or cause a denial of service by modifying certain files. This is due to the software setting the owner and group ID to 500 for those files when running on Linux.

Recommendations For versions 3.5.2a through 3.5.2c, consider changing the owner and group ID of the affected files to a more secure setting to prevent unauthorized access and potential code execution. As a temporary workaround, restrict access to the affected files to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-1976

Produtos afetados

Novell Netmail

Referências · 6

• http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm · Correção
• http://securitytracker.com/id?1014251 · Nota
• http://osvdb.org/17456 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2005-1976 · Nota de Segurança
• http://securityfocus.com/bid/14005 · Correção
• http://secunia.com/advisories/15763 · Aviso do Fabricante