Novell NetMail NMAP Agent Remote Buffer Overflow Vulnerability

Bugtraq ID:	15080
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 12 2005 12:00AM
Updated:	Oct 12 2005 12:00AM
Credit:	Discovery is credited to Tan Chew Keong, Secunia Research.
Vulnerable:	Novell NetMail 3.52 C1 Novell NetMail 3.52 C Novell NetMail 3.52 B Novell NetMail 3.52 A Novell NetMail 3.52
Not Vulnerable:	Novell NetMail 3.52 D

Novell NetMail NMAP Agent Remote Buffer Overflow Vulnerability

NetMail Network Messaging Application Protocol (NMAP) Agent is affected by a remote buffer overflow vulnerability.

This vulnerability allows remote attackers to execute arbitrary machine code in the context of the affected server process.

Novell NetMail NMAP Agent Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Novell NetMail NMAP Agent Remote Buffer Overflow Vulnerability

Solution:
Novell has released NetMail version 3.52D and various security advisories to address this issue. Please see the referenced advisories for more information about obtaining fixes.

Novell NetMail NMAP Agent Remote Buffer Overflow Vulnerability

References:

• NetMail Product Page (Novell)
  
• TID2972340 - NetMail 3.52D Update for Linux (Novell)
  
• TID2972433 - NetMail 3.52D Update for NetWare (Novell)
  
• TID2972438 - NetMail 3.52D Update for Windows (Novell)