CVE-2006-6425

Novell NetMail < 3.52e FTF2 - Authenticated Stack-Based Buffer Overflow via IMAP APPEND Command

Title source: llm

Exploitation Summary

EIP tracks 2 public exploits for CVE-2006-6425. PoCs published by Metasploit, MC, including Metasploit module exploits/windows/imap/novell_netmail_append.

AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in Novell NetMail's IMAP APPEND command. It sends a crafted payload to overwrite the buffer and execute arbitrary code on the target system.

Description

Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via unspecified vectors involving the APPEND command.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16488

View Code ZIP pw:eip

This is a Metasploit module exploiting a stack buffer overflow in Novell NetMail's IMAP APPEND command. It sends a crafted payload to overwrite the buffer and execute arbitrary code on the target system.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Novell NetMail <= 3.52d

Auth required

Prerequisites: Network access to the IMAP service · Valid credentials for authentication

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1068 - Exploitation for Privilege Escalation

devstral-2 · analyzed Feb 16, 2026 Full analysis →

metasploit WORKING POC NORMAL

by MC · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/novell_netmail_append.rb

View Code ZIP pw:eip

This Metasploit module exploits a stack buffer overflow in Novell NetMail 3.52 via the IMAP APPEND command. It sends a crafted payload to overwrite the buffer and control execution flow, targeting Windows 2000 SP0-SP4.