PT-2007-2750 · Novell · Novell Netmail

Publicado 2007-03-08 · Atualizado 2018-10-16 · CVE-2007-1350

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell NetMail version 3.5.2

Description The issue is a stack-based buffer overflow in the webadmin.exe component. It allows remote attackers to execute arbitrary code by providing a long username during HTTP Basic authentication.

Recommendations For Novell NetMail version 3.5.2, consider disabling HTTP Basic authentication until a patch is available to prevent exploitation. Restrict access to the webadmin.exe component to minimize the risk of arbitrary code execution. Avoid using long usernames in the authentication process until the issue is resolved.

Correção

Identificadores relacionados

CVE-2007-1350

Produtos afetados

Novell Netmail

Referências · 11

• http://secunia.com/advisories/24445 · Nota
• http://download.novell.com/Download?buildid=sMYRODW09pw · Correção
• http://securityfocus.com/archive/1/462154/100/0/threaded · Nota
• http://securityreason.com/securityalert/2395 · Nota
• http://securitytracker.com/id?1017734 · Nota
• http://zerodayinitiative.com/advisories/ZDI-07-009.html · Aviso do Fabricante
• http://securityfocus.com/bid/22857 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/0870 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1350 · Nota de Segurança
• http://kb.cert.org/vuls/id/919369 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32861 · Nota