CVE-2005-2176 Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies.
MediumCVSS 6.4
EPSS 3.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell netmail | = 3.0.1 | No fix listed |
| novell netmail | = 3.0.3a-a | No fix listed |
| novell netmail | = 3.0.3a-b | No fix listed |
| novell netmail | = 3.1 | No fix listed |
| novell netmail | = 3.1-f | No fix listed |
| novell netmail | = 3.5.2-a | No fix listed |
| novell netmail | = 3.5.2-b | No fix listed |
| novell netmail | = 3.5.2-c | No fix listed |
| novell netmail | = 3.5.2-c1 | No fix listed |
| novell netmail | = 3.5.2-e-ftfl | No fix listed |
| novell netmail | = 3.10 | No fix listed |
| novell netmail | = 3.10-a | No fix listed |
| novell netmail | = 3.10-b | No fix listed |
| novell netmail | = 3.10-c | No fix listed |
| novell netmail | = 3.10-d | No fix listed |
| novell netmail | = 3.10-e | No fix listed |
| novell netmail | = 3.10-f | No fix listed |
| novell netmail | = 3.10-g | No fix listed |
| novell netmail | = 3.10-h | No fix listed |
References
- 15962 third-party-advisory vendor-advisory
- 1014439 vdb-entry
- support.novell.com
- support.novell.com
- support.novell.com
- 17821 vdb-entry
- 14171 exploit vdb-entry
- ADV-2005-0994 vdb-entry