Buffer Overflow Vulnerability in Novell NetMail

CVE-2006-6424

Summary

Multiple buffer overflow vulnerabilities exist in Novell NetMail before version 3.52e FTF2, allowing remote attackers to execute arbitrary code. Specifically, attackers can exploit a heap overflow by appending literals to certain IMAP verbs during command continuation requests to the IMAPD. Additionally, a crafted STOR command to the Network Messaging Application Protocol (NMAP) daemon can lead to a stack overflow, enabling further exploitation.

References