Novell Netmail Authentication Buffer Overflow Vulnerability

Bugtraq ID:	20853
Class:	Boundary Condition Error
CVE:	CVE-2006-5478
Remote:	Yes
Local:	No
Published:	Nov 01 2006 12:00AM
Updated:	Nov 03 2007 12:06AM
Credit:	An anonymous researcher discovered this issue.
Vulnerable:	Novell NetMail 3.52 D Novell NetMail 3.52 C1 Novell NetMail 3.52 C Novell NetMail 3.52 B Novell NetMail 3.52 A Novell NetMail 3.52 Novell eDirectory 8.8.1 Novell eDirectory 8.8
Not Vulnerable:

Novell Netmail Authentication Buffer Overflow Vulnerability

Novell Netmail is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to an insufficiently sized memory buffer.

An attacker could leverage this issue to have arbitrary code execute with administrative privileges. A successful exploit could result in the complete compromise of affected computers.

Novell Netmail Authentication Buffer Overflow Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

Novell Netmail Authentication Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

The reporter of this issue states that Novell has released fixes for this issue, but Symantec has not confirmed this. Users of affected packages should contact the vendor for information on obtaining and applying fixes.

Novell Netmail Authentication Buffer Overflow Vulnerability

References:

• NetMail Product Page (Novell)
  
• ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability (Zero Day Initiative)