Novell NetMail NMAP vulnerable to buffer overflow when processing "STOR" commands

Overview A vulnerability in the way Novell NetMail handles NMAP "STOR" commands may cause a buffer overflow that may allow remote execution of arbitrary code. Description Novell NetMail's implementation of the Network Messaging Application Protocol NMAP contains a buffer overflow that may occur...

Novell NetMail NMAP STOR command buffer overflow

Added: 01/05/2007 CVE: CVE-2006-6424 BID: 21725 OSVDB: 31363 Background Novell NetMail servers include the Network Messaging Application Protocol NMAP service, which listens on port 689/TCP. Problem A buffer overflow in Novell NetMail allows remote attackers to execute arbitrary commands by sendi...

Novell NetMail NMAP STOR command buffer overflow

Added: 01/05/2007 CVE: CVE-2006-6424 BID: 21725 OSVDB: 31363 Background Novell NetMail servers include the Network Messaging Application Protocol NMAP service, which listens on port 689/TCP. Problem A buffer overflow in Novell NetMail allows remote attackers to execute arbitrary commands by sendi...

Novell NetMail NMAP STOR command buffer overflow

Added: 01/05/2007 CVE: CVE-2006-6424 BID: 21725 OSVDB: 31363 Background Novell NetMail servers include the Network Messaging Application Protocol NMAP service, which listens on port 689/TCP. Problem A buffer overflow in Novell NetMail allows remote attackers to execute arbitrary commands by sendi...

Novell NetMail NMAP STOR command buffer overflow

Added: 01/05/2007 CVE: CVE-2006-6424 BID: 21725 OSVDB: 31363 Background Novell NetMail servers include the Network Messaging Application Protocol NMAP service, which listens on port 689/TCP. Problem A buffer overflow in Novell NetMail allows remote attackers to execute arbitrary commands by sendi...

CVE-2006-6424

Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code 1 by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow; and 2 via crafted arguments to the STOR command to the...

CVE-2006-6424

Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code 1 by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow; and 2 via crafted arguments to the STOR command to the...

CVE-2006-6424

The CVE-2006-6424 vulnerability affects Novell NetMail (NMAP STOR and IMAP handling). Affected: NetMail servers prior to 3.52e FTF2; NMAP STOR buffer overflow can yield remote code execution, and IMAP command continuation handling can cause a heap overflow. Confirmed exploitation is possible via ...

Novell Netmail NMAP服务STOR命令远程溢出漏洞

Novell NetMail是基于Internet标准消息和安全协议的邮件和日历系统。 NetMail中绑定到TCP 689端口的NMAP服务（nmapd.exe）在处理STOR命令时存在缓冲区溢出漏洞，如果攻击者能够向该命令发送特定参数的话，就可以触发这个溢出，导致执行任意指令。 Novell NetMail 3.52 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026f.SALPublic.html...

[Full-disclosure] ZDI-06-052: Novell NetMail NMAP STOR Buffer Overflow Vulnerability

ZDI-06-052: Novell NetMail NMAP STOR Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-052.html December 22, 2006 -- CVE ID: CVE-2006-6424 -- Affected Vendor: Novell -- Affected Products: Novell NetMail 3.5.2 -- TippingPointTM IPS Customer Protection: TippingPoint I...

Novell NetMail NMAP STOR Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Novell NetMail. Successful exploitation requires the attacker to successfully authenticate to the affected service. The specific flaw exists in NetMail's implementation of the Network Messaging...

CVE-2006-6411

PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service crash via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap...

CVE-2006-6411

PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service crash via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap...

Linksys WIP 330 PhoneCtrl.exe端口扫描拒绝服务漏洞

Linksys WIP 330是一款VoIP网络无绳电话机。 Linksys WIP 330在处理端口扫描时存在漏洞，远程攻击者可能利用此漏洞对设备执行拒绝服务攻击。 如果使用如下命令对WIP 330的IP地址执行全端口范围的Nmap扫描的话： nmap -P0 WIP 330 ip address -p 1-65535 则在Nmap扫描结束时，PhoneCtrl.exe就会崩溃。 Linksys WIP 330 1.00.06A 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.linksys.com...

Linksys WIP 330 VoIP wireless phone DoS

nmap scan causes device to crash...

Linksys WIP 330 VoIP wireless phone crash from Nmap scan

Vulnerability Description ================== The Linksys WIP 330 VoIP wireless phone will crash when a full port-range Nmap scan is run against its IP address. Linksys WIP 330 Firmware Version ========================== 1.00.06A Nmap scan command ================ nmap -P0 WIP 330 ip address -p...

ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability

ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-036.html October 31, 2006 -- CVE ID: CVE-2006-5478 -- Affected Vendor: Novell -- Affected Products: Netmail 3.5.2 Novell eDirectory 8.8.1 -- TippingPointTM IPS Customer...

Novell Netmail User Authentication Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netmail. Exploitation does not require authentication. The specific flaw exists within the user authentication component of Novell Netmail. The routine responsible for authenticating Netmail...

CVE-2006-5478

Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via 1 a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors...

CVE-2006-5478

Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via 1 a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors...