First published: Wed Jun 08 2005(Updated: )
Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Novell NetMail | =3.1 | |
Novell NetMail | =3.10-f | |
Novell NetMail | =3.10-g | |
Novell NetMail | =3.10-e | |
Novell NetMail | =3.5.2-b | |
Novell NetMail | =3.10-h | |
Novell NetMail | =3.5.2-a | |
Novell NetMail | =3.10-b | |
Novell NetMail | =3.0.3a-a | |
Novell NetMail | =3.0.3a-b | |
Novell NetMail | =3.5.2-e-ftfl | |
Novell NetMail | =3.1-f | |
Novell NetMail | =3.10 | |
Novell NetMail | =3.10-c | |
Novell NetMail | =3.10-a | |
Novell NetMail | =3.10-d |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-1756 has a moderate severity level, as it allows remote attackers to perform cross-site scripting attacks.
To fix CVE-2005-1756, upgrade Novell NetMail to version 3.52C or later where this vulnerability is patched.
CVE-2005-1756 affects multiple versions of Novell NetMail including 3.1, 3.5.2, and 3.10 before 3.52C.
CVE-2005-1756 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web script or HTML.
Yes, CVE-2005-1756 can be exploited remotely by attackers to inject malicious scripts.