File Permission Vulnerability in Novell NetMail on Linux
CVE-2005-1976

Currently unrated

Key Information:

Vendor
Novell
Status
Netmail
Vendor
CVE Published:
31 December 2005

Summary

The Novell NetMail versions 3.5.2a, 3.5.2b, and 3.5.2c running on Linux improperly manage file permissions by assigning an owner and group ID of 500 to specific files. This misconfiguration potentially allows unauthorized users or groups with that ID to manipulate or execute those files, which could lead to arbitrary code execution or result in a denial of service. Addressing these vulnerabilities is crucial for maintaining the security and integrity of systems running Novell NetMail.

References

http://www.securityfocus.com/bid/14005
vdb-entryx_refsource_BID
http://secunia.com/advisories/15763
third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/17456
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.