CVE-2004-2298

Published: Dec 31, 2004Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator.

Affected (4)

Products: Novell: Internet Messaging System, Netmail

2 products

Internet Messaging System

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Novell Internet Messaging System	Version 2.6
Novell Internet Messaging System	Version 3.0
Novell Netmail	Version 3.1
Novell Netmail	Version 3.5

References (6)

http://secunia.com/advisories/13377

Source: cve@mitre.org

PatchVendor Advisory

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10095545.htm

Source: cve@mitre.org

Patch

http://www.osvdb.org/12234

Source: cve@mitre.org

http://secunia.com/advisories/13377

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10095545.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.osvdb.org/12234

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.