PT-2006-7033 · Novell · Novell Netmail

Dennis Rand · Published 2006-12-27 · Updated 2018-10-17 · CVE-2006-6424

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell NetMail versions prior to 3.52e FTF2

Description The issue is related to multiple buffer overflows that allow remote attackers to execute arbitrary code. This can be achieved in two ways: by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow, or via crafted arguments to the STOR command to the Network Messaging Application Protocol (NMAP) daemon, resulting in a stack overflow.

Recommendations For Novell NetMail versions prior to 3.52e FTF2, update to version 3.52e FTF2 or later to resolve the issue. As a temporary workaround, consider restricting access to the IMAPD and NMAP daemon to minimize the risk of exploitation. Avoid using crafted arguments to the STOR command until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-6424

Affected Products

Novell Netmail

References · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/novell/nmap_stor.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16813 · Exploit
• http://securitytracker.com/id?1017437 · Patch
• http://secunia.com/advisories/23437 · Vendor Advisory
• https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html · Patch
• http://zerodayinitiative.com/advisories/ZDI-06-052.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6424 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-06-053.html · Vendor Advisory
• http://cirt.dk/advisories/cirt-48-advisory.txt · Vendor Advisory
• http://securityfocus.com/archive/1/455201/100/0/threaded · Note
• http://securityfocus.com/bid/21725 · Note
• http://securityfocus.com/bid/21724 · Note
• http://securityfocus.com/archive/1/455202/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/5134 · Note
• http://kb.cert.org/vuls/id/381161 · Note