|
Novell NetMail File Ownership Security Issue
|
|
|
|
|
Secunia Advisory:
|
SA15763
|
|
|
Release Date:
|
2005-06-21
|
|
|
Critical:
|
Less critical
|
|
Impact:
|
Manipulation of data
|
|
Where:
|
Local system
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Novell NetMail 3.x
|
| | CVE reference: | CVE-2005-1976 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
A security issue has been reported in NetMail, which can be exploited by malicious, local users to delete or replace the NetMail binaries.
The security issue is caused due to the Owner and Group ID of the files in the NetMail patches being incorrectly set to 500. This can be exploited by users with Group ID 500 or a user with User ID 500 to delete or replace the binaries.
The security issue has been reported in the Linux distribution of NetMail 3.52a, 3.52b, and 3.52c patches.
Solution:
Update to version 3.52C1.
http://support.novell.com/servlet/filedownload/sec/pub/netmail352c1_lin.tgz
Provided and/or discovered by:
Reported by vendor.
Original Advisory:
Novell:
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971688.htm
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
13 Related Secunia Security Advisories, displaying 10
|
|
|
1. Novell NetMail AntiVirus Agent Integer Overflow Vulnerability
|
|
2. Novell NetMail NMDMC.EXE Buffer Overflow Vulnerability
|
|
3. Novell Netmail WebAdmin Long Username Buffer Overflow
|
|
4. Novell NetMail NMAP/IMAP Multiple Vulnerabilities
|
|
5. Novell Products Two Buffer Overflow Vulnerabilities
|
|
6. Novell NetMail IMAP Buffer Overflow Vulnerability
|
|
7. Novell Netmail Script Insertion Vulnerability
|
|
8. Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability
|
|
9. Novell NetMail Multiple Vulnerabilities
|
|
10. NetMail IMAPD Unspecified Buffer Overflow Vulnerability
|
Show all related advisories
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
