CVE-2006-6425: Buffer Overflow
Published Dec 27, 2006
·Updated
Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via unspecified vectors involving the APPEND command.
Affected Software
16 affected components
Novell Netmail=3.1
Novell Netmail=3.10-f
Novell Netmail=3.0.1
Novell Netmail=3.10-g
Novell Netmail=3.10-e
Novell Netmail<=3.5.2
Novell Netmail=3.10-h
Novell Netmail=3.10-b
Novell Netmail=3.0.3a-a
Novell Netmail=3.0.3a-b
Novell Netmail=3.1-f
Novell Netmail=3.10
Novell Netmail=3.10-c
Novell Netmail=3.10-a
Novell Netmail=3.5
Novell Netmail=3.10-d
Remediation
Patch Available
Patch Available
Patch Available
Event History
Dec 27, 2006
CVE Published
01:28 AM
Data Sourced
via NVD·01:28 AM
RemedyDescriptionSeverityAffected Software
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-6425?
CVE-2006-6425 is rated as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2006-6425?
To fix CVE-2006-6425, upgrade Novell NetMail to version 3.52e FTF2 or later.
3
What causes CVE-2006-6425?
CVE-2006-6425 is caused by a stack-based buffer overflow in the IMAP daemon of Novell NetMail.
4
Who is affected by CVE-2006-6425?
Remote authenticated users of Novell NetMail versions prior to 3.52e FTF2 are affected by CVE-2006-6425.
5
What actions can be taken to mitigate CVE-2006-6425?
In addition to upgrading, restricting access to the IMAP daemon can help mitigate the risk associated with CVE-2006-6425.