CVE-2004-2298: Novell Internet Messaging System

Medium severity, CVSS 6.4. EPSS: 1.5% chance of exploitation in the next 30 days.

Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator.

Affected products

• Novell Internet Messaging System: version 2.6 only; version 3.0 only
• Novell Netmail: version 3.1 only; version 3.5 only

Published 2004-12-31. Last modified 2026-06-16.