PT-2005-2926 · Novell · Novell Netmail

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-1976

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Low

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Novell NetMail versions 3.5.2a through 3.5.2c

Description The issue allows users or groups with a specific ID to potentially execute arbitrary code or cause a denial of service by modifying certain files. This is due to the software setting the owner and group ID to 500 for those files when running on Linux.

Recommendations For versions 3.5.2a through 3.5.2c, consider changing the owner and group ID of the affected files to a more secure setting to prevent unauthorized access and potential code execution. As a temporary workaround, restrict access to the affected files to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-1976

Affected Products

Novell Netmail

References · 6

• http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm · Patch
• http://osvdb.org/17456 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-1976 · Security Note
• http://securityfocus.com/bid/14005 · Patch
• http://secunia.com/advisories/15763 · Vendor Advisory
• http://securitytracker.com/id?1014251 · Note