PT-2006-7034 · Novell · Novell Netmail

Publicado 2006-12-27 · Atualizado 2018-10-17 · CVE-2006-6425

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell NetMail versions prior to 3.52e FTF2

Description The issue is related to a stack-based buffer overflow in the IMAP daemon (IMAPD) that allows remote authenticated users to execute arbitrary code. This is achieved through unspecified vectors involving the APPEND command.

Recommendations For versions prior to 3.52e FTF2, update to version 3.52e FTF2 or later to resolve the issue. As a temporary workaround, consider restricting access to the IMAP daemon (IMAPD) to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-6425

Produtos afetados

Novell Netmail

Referências · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/novell_netmail_append.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16488 · Exploit
• http://securityreason.com/securityalert/2080 · Nota
• http://kb.cert.org/vuls/id/258753 · Nota
• http://securitytracker.com/id?1017437 · Correção
• http://secunia.com/advisories/23437 · Aviso do Fabricante
• https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-6425 · Nota de Segurança
• http://vupen.com/english/advisories/2006/5134 · Nota
• http://zerodayinitiative.com/advisories/ZDI-06-054.html · Aviso do Fabricante
• http://securityfocus.com/archive/1/455200/100/0/threaded · Nota
• http://securityfocus.com/bid/21723 · Nota