PT-2004-3192 · Novell+1 · Netmail+2

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-2298

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Novell Internet Messaging System (NIMS) versions 2.6 through 3.0 NetMail versions 3.1 through 3.5

Description: The issue allows remote attackers to read and write mail store data due to a default NMAP authentication credential. This can be exploited if the administrator does not change the credential using the NMAP Credential Generator.

Recommendations: For Novell Internet Messaging System (NIMS) versions 2.6 through 3.0, change the default NMAP authentication credential using the NMAP Credential Generator. For NetMail versions 3.1 through 3.5, change the default NMAP authentication credential using the NMAP Credential Generator.

Fix

Related Identifiers

CVE-2004-2298

Affected Products

Nmap

Netmail

Novell Internet Messaging System

References · 4

• http://secunia.com/advisories/13377 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2298 · Security Note
• http://support.novell.com/cgi-bin/search/searchtid.cgi?/10095545.htm · Patch
• http://osvdb.org/12234 · Note