Netmail (Novell) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 48 known versions, newest CVE from 2007-12-10. Vendor: Novell.
CVEs of Netmail
- CVE-2007-6302 - CVSS 6.8 (medium), 2007-12-10: Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to…
- CVE-2007-2616 - CVSS 10 (critical), 2007-05-11: Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote attackers to execute…
- CVE-2007-1350 - CVSS 6.8 (medium), 2007-03-08: Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username during HTTP Basic…
- CVE-2006-6761 - CVSS 6.5 (medium), 2006-12-27: Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via a…
- CVE-2006-6762 - CVSS 4 (medium), 2006-12-27: The IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to cause a denial of service via an APPEND command with a single…
- CVE-2006-6425 - CVSS 9 (critical), 2006-12-27: Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via…
- CVE-2006-6424 - CVSS 9 (critical), 2006-12-27: Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to certain IMAP verbs…
- CVE-2005-1976 - CVSS 1.7 (low), 2005-12-31: Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with…
- CVE-2005-3314 - CVSS 7.5 (high), 2005-11-18: Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."
- CVE-2005-2469 - CVSS 4.6 (medium), 2005-10-20: Stack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier versions allows local users to execute arbitrary code via a long…
- CVE-2005-2176 - CVSS 6.4 (medium), 2005-07-09: Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to…
- CVE-2005-1758 - CVSS 7.5 (high), 2005-06-08: Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrary code.
- CVE-2005-1757 - CVSS 7.5 (high), 2005-06-08: Buffer overflow in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to execute arbitrary code.
- CVE-2005-1756 - CVSS 4.3 (medium), 2005-06-08: Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or…
- CVE-2004-2298 - CVSS 6.4 (medium), 2004-12-31: Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote…
- CVE-2002-0997 - CVSS 5 (medium), 2002-10-04: Buffer overflows in IMAP Agent (imapd) for Novell NetMail (NIMS) 3.0.3 before 3.0.3A allows remote attackers to cause a denial of service.
- CVE-2002-0996 - CVSS 7.5 (high), 2002-10-04: Multiple buffer overflows in Novell NetMail (NIMS) 3.0.3 before 3.0.3C allows remote attackers to cause a denial of service and possibly execute arbitrary…