VulnerabilityModified
CVE-2005-2176
Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies.
MEDIUM 6.4EPSS 3.50%
Does this matter?
Lower severity and a low EPSS score (3.50%). Track it; it rarely justifies an emergency change on its own.
Description
Novell NetMail automatically processes HTML in an attachment without prompting the user to save or open it, which makes it easier for remote attackers to conduct web-based attacks and steal cookies.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 3.50% probability · 89th percentile
- CISA KEV
- Not listed
- Affected
- novell/netmail
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/15962Vendor Advisory
- http://securitytracker.com/id?1014439
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972340.htm
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972433.htm
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972438.htm
- http://www.osvdb.org/17821
- http://www.securityfocus.com/bid/14171Exploit
- http://www.vupen.com/english/advisories/2005/0994
- http://secunia.com/advisories/15962Vendor Advisory
- http://securitytracker.com/id?1014439
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972340.htm
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972433.htm
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972438.htm
- http://www.osvdb.org/17821
- http://www.securityfocus.com/bid/14171Exploit
- http://www.vupen.com/english/advisories/2005/0994
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.