CVE-2005-1756: XSS
Published Jun 8, 2005
·Updated
Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields.
Affected Software
16 affected components
Novell Netmail=3.0.3a-a
Novell Netmail=3.0.3a-b
Novell Netmail=3.1
Novell Netmail=3.1-f
Novell Netmail=3.5.2-a
Novell Netmail=3.5.2-b
Novell Netmail=3.5.2-e-ftfl
Novell Netmail=3.10
Novell Netmail=3.10-a
Novell Netmail=3.10-b
Novell Netmail=3.10-c
Novell Netmail=3.10-d
Novell Netmail=3.10-e
Novell Netmail=3.10-f
Novell Netmail=3.10-g
Novell Netmail=3.10-h
Remediation
Patch Available
Event History
Jun 8, 2005
CVE Published
04:00 AM
Jun 15, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1756?
CVE-2005-1756 has a moderate severity level, as it allows remote attackers to perform cross-site scripting attacks.
2
How do I fix CVE-2005-1756?
To fix CVE-2005-1756, upgrade Novell NetMail to version 3.52C or later where this vulnerability is patched.
3
What software versions are affected by CVE-2005-1756?
CVE-2005-1756 affects multiple versions of Novell NetMail including 3.1, 3.5.2, and 3.10 before 3.52C.
4
What type of vulnerability is CVE-2005-1756?
CVE-2005-1756 is a cross-site scripting (XSS) vulnerability that allows the injection of arbitrary web script or HTML.
5
Can CVE-2005-1756 be exploited remotely?
Yes, CVE-2005-1756 can be exploited remotely by attackers to inject malicious scripts.