PT-2007-2750 · Novell · Novell Netmail

Published 2007-03-08 · Updated 2018-10-16 · CVE-2007-1350

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell NetMail version 3.5.2

Description The issue is a stack-based buffer overflow in the webadmin.exe component. It allows remote attackers to execute arbitrary code by providing a long username during HTTP Basic authentication.

Recommendations For Novell NetMail version 3.5.2, consider disabling HTTP Basic authentication until a patch is available to prevent exploitation. Restrict access to the webadmin.exe component to minimize the risk of arbitrary code execution. Avoid using long usernames in the authentication process until the issue is resolved.

Fix

Related Identifiers

CVE-2007-1350

Affected Products

Novell Netmail

References · 11

• http://download.novell.com/Download?buildid=sMYRODW09pw · Patch
• http://zerodayinitiative.com/advisories/ZDI-07-009.html · Vendor Advisory
• http://securityfocus.com/bid/22857 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1350 · Security Note
• http://secunia.com/advisories/24445 · Note
• http://securityfocus.com/archive/1/462154/100/0/threaded · Note
• http://securityreason.com/securityalert/2395 · Note
• http://securitytracker.com/id?1017734 · Note
• http://vupen.com/english/advisories/2007/0870 · Note
• http://kb.cert.org/vuls/id/919369 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32861 · Note