Lucene search

[email protected]NVD:CVE-2004-2298

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2298

2004-12-3105:00:00

[email protected]

web.nvd.nist.gov

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

76.1%

JSON

Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator.

Affected configurations

Nvd

Node

novellinternet_messaging_systemMatch2.6

novellinternet_messaging_systemMatch3.0

novellnetmailMatch3.1

novellnetmailMatch3.5

VendorProductVersionCPE
novellinternet_messaging_system2.6cpe:2.3:a:novell:internet_messaging_system:2.6:*:*:*:*:*:*:*
novellinternet_messaging_system3.0cpe:2.3:a:novell:internet_messaging_system:3.0:*:*:*:*:*:*:*
novellnetmail3.1cpe:2.3:a:novell:netmail:3.1:*:*:*:*:*:*:*
novellnetmail3.5cpe:2.3:a:novell:netmail:3.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
novell	internet_messaging_system	2.6	cpe:2.3:a:novell:internet_messaging_system:2.6:::::::*
novell	internet_messaging_system	3.0	cpe:2.3:a:novell:internet_messaging_system:3.0:::::::*
novell	netmail	3.1	cpe:2.3:a:novell:netmail:3.1:::::::*
novell	netmail	3.5	cpe:2.3:a:novell:netmail:3.5:::::::*

References

secunia.com/advisories/13377

support.novell.com/cgi-bin/search/searchtid.cgi?/10095545.htm

www.osvdb.org/12234

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

76.1%

JSON

Related for NVD:CVE-2004-2298

cve1 cvelist1