[SA15763] Novell NetMail File Ownership Security Issue

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Novell Netmail weak permissons

uid/gid 500/500 is incorrectly set as file owner...

Novell NetMail < 3.52C IMAP Agent Multiple Remote Overflows

The remote host is running Novell NetMail, a messaging and calendaring system for Windows, Linux, Unix, and NetWare. The version of NetMail installed on the remote host is prone to multiple buffer overflows in its IMAP agent, one when handling long command tags, the other involving IMAP command...

CVE-2005-1758

Novell NetMail IMAPD is affected by a heap overflow in the IMAP command continuation handling in NetMail versions before 3.52C, enabling unauthenticated remote code execution with the privileges of the NetMail service. Exploitation details are described in iDEFENSE advisory and the Nessus/SEC ref...

CVE-2005-1756

Technical details about CVE-2005-1756 are not publicly provided in the supplied documents. Monitor for updates from the cited advisories and CVE records.

CVE-2005-1758

Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrary code...

CVE-2005-1757

Buffer overflow in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to execute arbitrary code...

CVE-2005-1757

Technical details about CVE-2005-1757 are not publicly provided in the supplied documents; no concrete affected product/version or exploit specifics are listed beyond the general description. Monitor for updates.

CVE-2005-1756

Cross-site scripting XSS vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields...

CVE-2005-1758

Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrary code...

CVE-2005-1756

Cross-site scripting XSS vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields...

CVE-2005-1757

Buffer overflow in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to execute arbitrary code...

[SA13448] NetMail IMAPD Unspecified Buffer Overflow Vulnerability

TITLE: NetMail IMAPD Unspecified Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA13448 VERIFY ADVISORY: http://secunia.com/advisories/13448/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Novell NetMail 3.x http://secunia.com/product/1530/ DESCRIPTION: A...

Buffer overflow Novell Netmail

Multiple buffer overflows...

Novell NetMail default credentials

Default NMAP credentials are not changed after installation...

[SA13377] Novell NetMail Default NMAP Authentication Credential Security Issue

TITLE: Novell NetMail Default NMAP Authentication Credential Security Issue SECUNIA ADVISORY ID: SA13377 VERIFY ADVISORY: http://secunia.com/advisories/13377/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of system information, Exposure of sensitive information WHERE: From local...

CVE-2002-0996

Multiple buffer overflows in Novell NetMail NIMS 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 WebAdmin or 2 ModWeb...

CVE-2002-0997

Buffer overflows in IMAP Agent imapd for Novell NetMail NIMS 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service...

CVE-2002-0997

CVE-2002-0997 affects Novell NetMail (NIMS) IMAP Agent (imapd) 3.0.3 and earlier. The issue is a buffer overflow that allows remote attackers to cause a denial of service. The available records describe the vulnerable component and impact but do not specify a patch version or remediation steps. N...

CVE-2002-0996

CVE-2002-0996 concerns multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 and earlier, allowing remote attackers to cause a denial of service and potentially execute arbitrary code via the WebAdmin or ModWeb interfaces. Affected product: NetMail (NIMS) 3.0.3 before 3.0.3C. Underlying issue:...