CVE-2005-1976

Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with that ID to execute arbitrary code or cause a denial of service by modifying those files.

CVSS v2.0 1.7 LOW

1.7^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 3.1 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/15763	Patch Vendor Advisory
http://securitytracker.com/id?1014251
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm	Patch
http://www.osvdb.org/17456	Patch
http://www.securityfocus.com/bid/14005	Patch
http://secunia.com/advisories/15763	Patch Vendor Advisory
http://securitytracker.com/id?1014251
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm	Patch
http://www.osvdb.org/17456	Patch
http://www.securityfocus.com/bid/14005	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:novell:netmail:3.5.2:a::::::
	cpe:2.3:a:novell:netmail:3.5.2:b::::::
	cpe:2.3:a:novell:netmail:3.5.2:c::::::

History

20 Nov 2024, 23:58

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/15763 - Patch, Vendor Advisory~~	() http://secunia.com/advisories/15763 - Patch, Vendor Advisory
References	~~() http://securitytracker.com/id?1014251 -~~	() http://securitytracker.com/id?1014251 -
References	~~() http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm - Patch~~	() http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm - Patch
References	~~() http://www.osvdb.org/17456 - Patch~~	() http://www.osvdb.org/17456 - Patch
References	~~() http://www.securityfocus.com/bid/14005 - Patch~~	() http://www.securityfocus.com/bid/14005 - Patch

Information

Published : 2005-12-31 05:00

Updated : 2024-11-20 23:58

NVD link : CVE-2005-1976

Mitre link : CVE-2005-1976

CVE.ORG link : CVE-2005-1976

JSON object : View

Products Affected

novell

netmail

CWE

NVD-CWE-Other

{"id": "CVE-2005-1976", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.7, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.1, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-12-31T05:00:00.000", "references": [{"url": "http://secunia.com/advisories/15763", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1014251", "source": "cve@mitre.org"}, {"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/17456", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/14005", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/15763", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1014251", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.novell.com/cgi-bin/search/searchtid.cgi?/10098022.htm", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/17456", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/14005", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with that ID to execute arbitrary code or cause a denial of service by modifying those files."}], "lastModified": "2024-11-20T23:58:32.183", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:novell:netmail:3.5.2:a:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6AFAEE62-246B-4687-8B9A-A6C142D72308"}, {"criteria": "cpe:2.3:a:novell:netmail:3.5.2:b:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21946EC8-3327-4AE6-9A0D-09C1EBCC7683"}, {"criteria": "cpe:2.3:a:novell:netmail:3.5.2:c:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B922B34-BBCA-4791-92EF-43ADDA7E2473"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}