Novell

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2005-1976 1Novell 1Netmail Apr 16, 2026 Dec 31, 2005 N/A· v4 N/A· v3 1.7 LOW· v2 Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with that ID to execute arbitrary code or cause a denial of servic...Show more Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files, which could allow users or groups with that ID to execute arbitrary code or cause a denial of service by modifying those files.Show less
CVE-2005-1730 1Novell 1Imanager Apr 16, 2026 Dec 31, 2005 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted packets, as demonstrated by "OpenSSL ASN...Show more Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted packets, as demonstrated by "OpenSSL ASN.1 brute forcer." NOTE: this issue might overlap CVE-2004-0079, CVE-2004-0081, or CVE-2004-0112.Show less
CVE-2005-3786 1Novell 3Zenworks Zenworks DesktopsZenworks Servers Apr 16, 2026 Nov 23, 2005 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console On...Show more Novell ZENworks for Desktops 4.0.1, ZENworks for Servers 3.0.2, and ZENworks 6.5 Desktop Management does not restrict access to Remote Diagnostics, which allows local users to bypass security policies by using Console One.Show less
CVE-2005-3314 1Novell 1Netmail Apr 16, 2026 Nov 18, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."
CVE-2005-3315 1Novell 1Zenworks Patch Management Server Apr 16, 2026 Oct 30, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (...Show more Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.Show less
CVE-2005-3321 2Novell Suse 2Suse Linux Suse Linux Apr 16, 2026 Oct 27, 2005 N/A· v4 N/A· v3 4.6 MEDIUM· v2 chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is dele...Show more chkstat in SuSE Linux 9.0 through 10.0 allows local users to modify permissions of files by creating a hardlink to a file from a world-writable directory, which can cause the link count to drop to 1 when the file is deleted or replaced, which is then modified by chkstat to use weaker permissions.Show less
CVE-2005-2469 1Novell 1Netmail Apr 16, 2026 Oct 20, 2005 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Stack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier versions allows local users to execute arbitrary code via a long user name in the USER command.
CVE-2005-2804 1Novell 1Groupwise Apr 16, 2026 Oct 4, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Integer overflow in the registry parsing code in GroupWise 6.5.3, and possibly earlier version, allows remote attackers to cause a denial of service (application crash) via a large TCP/IP port in the Windows registry key...Show more Integer overflow in the registry parsing code in GroupWise 6.5.3, and possibly earlier version, allows remote attackers to cause a denial of service (application crash) via a large TCP/IP port in the Windows registry key.Show less
CVE-2005-2852 1Novell 1Netware Apr 16, 2026 Sep 8, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unknown vulnerability in CIFS.NLM in Novell Netware 6.5 SP2 and SP3, 5.1, and 6.0 allows remote attackers to cause a denial of service (ABEND) via an incorrect password length, as exploited by the "worm.rbot.ccc" worm.
CVE-2005-2620 1Novell 1Groupwise Apr 16, 2026 Aug 17, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 grpWise.exe for Novell GroupWise client 5.5 through 6.5.2 stores the password in plaintext in memory, which allows attackers to obtain the password using a debugger or another mechanism to read process memory.
CVE-2005-2551 1Novell 1Edirectory Apr 16, 2026 Aug 12, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obtain access to files via unknown vectors.
CVE-2005-1767 2Novell Suse 3Linux Desktop Open Enterprise ServerSuse Linux Apr 16, 2026 Aug 5, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 traps.c in the Linux kernel 2.6.x and 2.4.x executes stack segment faults on an exception stack, which allows local users to cause a denial of service (oops and stack fault exception).
CVE-2005-1761 2Novell Suse 3Linux Desktop Open Enterprise ServerSuse Linux Apr 16, 2026 Aug 5, 2005 N/A· v4 N/A· v3 2.1 LOW· v2 Linux kernel 2.6 and 2.4 on the IA64 architecture allows local users to cause a denial of service (kernel crash) via ptrace and the restore_sigcontext function.
CVE-2005-2346 1Novell 1Groupwise Apr 16, 2026 Aug 3, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a long entry, as demonstrated using a long ES02TKS.VEW value in the Group Task sectio...Show more Buffer overflow in Novell GroupWise 6.5 Client allows remote attackers to execute arbitrary code via a GWVW02xx.INI language file with a long entry, as demonstrated using a long ES02TKS.VEW value in the Group Task section.Show less
CVE-2005-2276 1Novell 1Groupwise Webaccess Apr 16, 2026 Jul 26, 2005 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI (e.g. "j...Show more Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI (e.g. "j&#X41vascript" in an IMG tag.Show less
CVE-2005-2176 1Novell 1Netmail Apr 16, 2026 Jul 9, 2005 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies.
CVE-2005-1729 1Novell 1Edirectory Apr 16, 2026 Jun 12, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Novell eDirectory 8.7.3 allows remote attackers to cause a denial of service (application crash) via a URL containing an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1.
CVE-2005-1763 2Novell Suse 2Linux Desktop Suse Linux Apr 16, 2026 Jun 9, 2005 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in ptrace in the Linux Kernel for 64-bit architectures allows local users to write bytes into kernel memory.
CVE-2005-1758 1Novell 1Netmail Apr 16, 2026 Jun 8, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrary code.
CVE-2005-1757 1Novell 1Netmail Apr 16, 2026 Jun 8, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in the Modweb agent for Novell NetMail 3.52 before 3.52C, when renaming folders, may allow attackers to execute arbitrary code.

Previous 1...272829...33 Next