Lucene search
MitreCVE-2004-2298HistoryAug 05, 2005 - 4:00 a.m.
CVE-2004-2298
2005-08-0504:00:00
mitre
web.nvd.nist.gov
21
novell
internet messaging system
netmail
nims
nmap
authentication
vulnerability
remote attackers
mail store
data
nvd
cve-2004-2298
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.005
Percentile
76.1%
Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator.
Affected configurations
Node
novellinternet_messaging_systemMatch2.6
ORnovellinternet_messaging_systemMatch3.0
ORnovellnetmailMatch3.1
ORnovellnetmailMatch3.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| novell | internet_messaging_system | 2.6 | cpe:2.3:a:novell:internet_messaging_system:2.6:*:*:*:*:*:*:* |
| novell | internet_messaging_system | 3.0 | cpe:2.3:a:novell:internet_messaging_system:3.0:*:*:*:*:*:*:* |
| novell | netmail | 3.1 | cpe:2.3:a:novell:netmail:3.1:*:*:*:*:*:*:* |
| novell | netmail | 3.5 | cpe:2.3:a:novell:netmail:3.5:*:*:*:*:*:*:* |
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
AI Score
7.2
Confidence
Low
EPSS
0.005
Percentile
76.1%
Related for CVE-2004-2298