CVE-2007-1350

2007-03-0822:19:00

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.942

Percentile

99.2%

JSON

Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username during HTTP Basic authentication.

Affected configurations

Nvd

Node

novellnetmailMatch3.5.2a

novellnetmailMatch3.5.2b

novellnetmailMatch3.5.2c

novellnetmailMatch3.5.2c1

novellnetmailMatch3.5.2d

novellnetmailMatch3.5.2e-ftfl

VendorProductVersionCPE
novellnetmail3.5.2cpe:2.3:a:novell:netmail:3.5.2:a:*:*:*:*:*:*
novellnetmail3.5.2cpe:2.3:a:novell:netmail:3.5.2:b:*:*:*:*:*:*
novellnetmail3.5.2cpe:2.3:a:novell:netmail:3.5.2:c:*:*:*:*:*:*
novellnetmail3.5.2cpe:2.3:a:novell:netmail:3.5.2:c1:*:*:*:*:*:*
novellnetmail3.5.2cpe:2.3:a:novell:netmail:3.5.2:d:*:*:*:*:*:*
novellnetmail3.5.2cpe:2.3:a:novell:netmail:3.5.2:e-ftfl:*:*:*:*:*:*

Vendor	Product	Version	CPE
novell	netmail	3.5.2	cpe:2.3:a:novell:netmail:3.5.2:a::::::
novell	netmail	3.5.2	cpe:2.3:a:novell:netmail:3.5.2:b::::::
novell	netmail	3.5.2	cpe:2.3:a:novell:netmail:3.5.2:c::::::
novell	netmail	3.5.2	cpe:2.3:a:novell:netmail:3.5.2:c1::::::
novell	netmail	3.5.2	cpe:2.3:a:novell:netmail:3.5.2:d::::::
novell	netmail	3.5.2	cpe:2.3:a:novell:netmail:3.5.2:e-ftfl::::::