PT-2006-7033 · Novell · Novell Netmail

Dennis Rand · Publicado 2006-12-27 · Atualizado 2018-10-17 · CVE-2006-6424

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell NetMail versions prior to 3.52e FTF2

Description The issue is related to multiple buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved in two ways: by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow, or via crafted arguments to the STOR command to the Network Messaging Application Protocol (NMAP) daemon, resulting in a stack overflow.

Recommendations For Novell NetMail versions prior to 3.52e FTF2, update to version 3.52e FTF2 or later to resolve the issue. As a temporary workaround, consider restricting access to the IMAPD and NMAP daemon to minimize the risk of exploitation. Avoid using crafted arguments to the STOR command until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-6424

Produtos afetados

Novell Netmail

Referências · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/novell/nmap_stor.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16813 · Exploit
• http://securitytracker.com/id?1017437 · Correção
• http://securityfocus.com/archive/1/455201/100/0/threaded · Nota
• http://secunia.com/advisories/23437 · Aviso do Fabricante
• https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html · Correção
• http://securityfocus.com/bid/21725 · Nota
• http://securityfocus.com/bid/21724 · Nota
• http://zerodayinitiative.com/advisories/ZDI-06-052.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-6424 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-06-053.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/455202/100/0/threaded · Nota
• http://cirt.dk/advisories/cirt-48-advisory.txt · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/5134 · Nota
• http://kb.cert.org/vuls/id/381161 · Nota