CVE-2006-6424

Novell NetMail <3.52e - RCE

Title source: llm

Description

Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow; and (2) via crafted arguments to the STOR command to the Network Messaging Application Protocol (NMAP) daemon, resulting in a stack overflow.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16813

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

by MC · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/novell/nmap_stor.rb

View Code ZIP pw:eip

References (14)

[US Government Resource] http://www.kb.cert.org/vuls/id/381161

[Patch] https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html

[Patch, Vendor Advisory] http://www.zerodayinitiative.com/advisories/ZDI-06-053.html

[Patch, Vendor Advisory] http://www.zerodayinitiative.com/advisories/ZDI-06-052.html

[US Government Resource] http://www.kb.cert.org/vuls/id/912505

[Third Party Advisory] http://securityreason.com/securityalert/2081

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/21725

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/455201/100/0/threaded

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/5134

[Patch, Vendor Advisory] http://www.cirt.dk/advisories/cirt-48-advisory.txt

[Patch] http://securitytracker.com/id?1017437

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/21724

[Patch, Vendor Advisory] http://secunia.com/advisories/23437

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/455202/100/0/threaded

Scores

EPSS 0.6921

EPSS Percentile 98.7%

Details

Status published

Products (6)

novell/netmail 3.0.1

novell/netmail 3.0.3a a (2 CPE variants)

novell/netmail 3.1 (2 CPE variants)

novell/netmail 3.5

novell/netmail 3.10 (9 CPE variants)

novell/netmail < 3.5.2

Published Dec 27, 2006

Tracked Since Feb 18, 2026