CVE-2006-6424
50Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 59%
da publicação à arma1229 dias
Publicada no NVD27 de dez.
1ª PoC+1229d
metasploit23 de dez.
probabilidade de exploração
59%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow; and (2) via crafted arguments to the STOR command to the Network Messaging Application Protocol (NMAP) daemon, resulting in a stack overflow.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16813⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://secunia.com/advisories/23437http://securityreason.com/securityalert/2081http://securitytracker.com/id?1017437https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.htmlhttp://www.cirt.dk/advisories/cirt-48-advisory.txthttp://www.kb.cert.org/vuls/id/381161http://www.kb.cert.org/vuls/id/912505http://www.securityfocus.com/archive/1/455201/100/0/threadedhttp://www.securityfocus.com/archive/1/455202/100/0/threadedhttp://www.securityfocus.com/bid/21724http://www.securityfocus.com/bid/21725http://www.vupen.com/english/advisories/2006/5134