Novell NetMail WebAdmin is a web-based administration interface which runs an HTTP server on port 89/TCP.
A buffer overflow vulnerability in Novell NetMail WebAdmin allows remote attackers to execute arbitrary commands by sending a long username during HTTP Basic authentication.
Download and install the NetMail 3.52E Update.
Exploit works on Novell NetMail 3.52.
In order for the exploit to succeed, the total number of characters in the tree and context parameters must be correct.
Windows Server 2003 SP0
Windows Server 2003 SP1 / Windows Server 2003