PT-2007-7171 · Messaging Architects+1 · M+Netmail+1

Publicado 2007-12-10 · Atualizado 2018-10-15 · CVE-2007-6302

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell NetMail versions 3.5.2 through 3.5.2E

Description The issue is related to multiple heap-based buffer overflows in the avirus.exe component. This allows remote attackers to execute arbitrary code via unspecified ASCII integers used as memory allocation arguments.

Recommendations For Novell NetMail versions 3.5.2 through 3.5.2E, update to Messaging Architects M+NetMail 3.52f (aka 3.5.2F) to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-6302

Produtos afetados

M+Netmail

Novell Netmail

Referências · 10

• http://securityfocus.com/archive/1/484843/100/0/threaded · Nota
• http://securityfocus.com/bid/26753 · Nota
• https://secure-support.novell.com/KanisaPlatform/Publishing/990/3639135_f.SAL_Public.html · Nota
• http://messagingarchitects.com/en/support/mplusnetmail/docs/readme.pdf · Nota
• http://vupen.com/english/advisories/2007/4112 · Aviso do Fabricante
• http://secunia.com/advisories/27974 · Aviso do Fabricante
• http://zerodayinitiative.com/advisories/ZDI-07-072.html · Nota
• http://securitytracker.com/id?1019063 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6302 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38909 · Nota