182 matches found
Secunia Research: Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability
====================================================================== Secunia Research 12/10/2005 - Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
iDEFENSE Security Advisory 09.01.05: Novell NetMail IMAPD Command Continuation Request Heap Overflow
Novell NetMail IMAPD Command Continuation Request Heap Overflow iDEFENSE Security Advisory 09.01.05 www.idefense.com/application/poi/display?id=301&type=vulnerabilities September 1, 2005 I. BACKGROUND Novell NetMail is an e-mail and calendaring system that is based on Internet-standard messaging...
Novell Netmail integer overflow
Integer overflow on continuation request processing leads to heap overflow...
CVE-2004-2298
Novell Internet Messaging System NIMS 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator...
CVE-2004-2298
Affected products: Novell Internet Messaging System (NIMS) 2.6/3.0 and NetMail 3.1/3.5. Vulnerability: Installed with a default NMAP authentication credential, enabling unauthorized access. Impact: Remote attackers can read and write mail store data if the administrator does not change the creden...
CVE-2004-2298: Undefined Security Weakness
Novell Internet Messaging System NIMS 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator...
CVE-2005-2176
Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies...
CVE-2005-2176
Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies...
CVE-2005-2176
Novell NetMail is vulnerable to an issue where HTML in an attachment is processed automatically without prompting the user to save or open it, enabling potential web-based attacks and cookie theft. The provided sources (NVD/CVE record) confirm the description but do not specify affected versions,...
Novell NetMail crossite scripting
Crossite scripting on attached HTML files...
CVE-2005-2176: Undefined Security Weakness
Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies...
[SA15962] Novell Netmail Script Insertion Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Novell NetMail 3.x - Automatic Script Execution
Novell NetMail 3.x - Automatic Script Execution source: https://www.securityfocus.com/bid/14171/info Novell NetMail email client is prone to an input validation vulnerability. Reports indicate that HTML and JavaScript attached to received email messages is executed automatically, when the email...
[SA15763] Novell NetMail File Ownership Security Issue
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Novell Netmail weak permissons
uid/gid 500/500 is incorrectly set as file owner...
Novell NetMail < 3.52C IMAP Agent Multiple Remote Overflows
The remote host is running Novell NetMail, a messaging and calendaring system for Windows, Linux, Unix, and NetWare. The version of NetMail installed on the remote host is prone to multiple buffer overflows in its IMAP agent, one when handling long command tags, the other involving IMAP command...
CVE-2005-1758
Novell NetMail IMAPD is affected by a heap overflow in the IMAP command continuation handling in NetMail versions before 3.52C, enabling unauthenticated remote code execution with the privileges of the NetMail service. Exploitation details are described in iDEFENSE advisory and the Nessus/SEC ref...
CVE-2005-1757
Technical details about CVE-2005-1757 are not publicly provided in the supplied documents; no concrete affected product/version or exploit specifics are listed beyond the general description. Monitor for updates.