Lucene search

K
cveMitreCVE-2005-1976
HistoryJun 05, 2006 - 6:00 p.m.

CVE-2005-1976

2006-06-0518:00:00
mitre
web.nvd.nist.gov
29
cve-2005-1976
novell netmail
linux
arbitrary code execution
dos

CVSS2

1.7

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

44.3%

Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with that ID to execute arbitrary code or cause a denial of service by modifying those files.

Affected configurations

Nvd
Node
novellnetmailMatch3.5.2a
OR
novellnetmailMatch3.5.2b
OR
novellnetmailMatch3.5.2c
VendorProductVersionCPE
novellnetmail3.5.2cpe:2.3:a:novell:netmail:3.5.2:a:*:*:*:*:*:*
novellnetmail3.5.2cpe:2.3:a:novell:netmail:3.5.2:b:*:*:*:*:*:*
novellnetmail3.5.2cpe:2.3:a:novell:netmail:3.5.2:c:*:*:*:*:*:*

CVSS2

1.7

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

44.3%

Related for CVE-2005-1976