CVE-2006-6424
50Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 58%
da publicação à arma1229 dias
Publicada no NVD27 de dez.
1ª PoC+1229d
metasploit23 de dez.
probabilidade de exploração
58%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow; and (2) via crafted arguments to the STOR command to the Network Messaging Application Protocol (NMAP) daemon, resulting in a stack overflow.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 1
exploitdbwww.exploit-db.com/exploits/16813não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://secunia.com/advisories/23437http://securityreason.com/securityalert/2081http://securitytracker.com/id?1017437https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.htmlhttp://www.cirt.dk/advisories/cirt-48-advisory.txthttp://www.kb.cert.org/vuls/id/381161http://www.kb.cert.org/vuls/id/912505http://www.securityfocus.com/archive/1/455201/100/0/threadedhttp://www.securityfocus.com/archive/1/455202/100/0/threadedhttp://www.securityfocus.com/bid/21724http://www.securityfocus.com/bid/21725http://www.vupen.com/english/advisories/2006/5134