Schweregrad: : Crítico
  Identificador(es) CVE: : CVE-2006-6425
  Data do informe: 15 fevereiro 2011

  Descrição

Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via unspecified vectors involving the APPEND command.

  Exposição das informações

Successful exploitation requires a valid user account. This vulnerability is addressed in the following product update: Novell, NetMail, 3.52e FTF2

  Solução

  Trend Micro Deep Security DPI Rule Number: 1000900
  Trend Micro Deep Security DPI Rule Name: 1000900 - Novell NetMail IMAP imapd.exe APPEND Command Buffer Overflow

  Software infectado e versão:

  • Novell Netmail 3.0.1
  • Novell Netmail 3.0.3
  • Novell Netmail 3.0.3a
  • Novell Netmail 3.0.3b
  • Novell Netmail 3.1
  • Novell Netmail 3.10
  • Novell Netmail 3.10a
  • Novell Netmail 3.10b
  • Novell Netmail 3.10c
  • Novell Netmail 3.10d
  • Novell Netmail 3.10e
  • Novell Netmail 3.10f
  • Novell Netmail 3.10g
  • Novell Netmail 3.10h
  • Novell Netmail 3.1f
  • Novell Netmail 3.5
  • Novell Netmail 3.5.2