CVE-2006-6424: novell netmail
Vulnerability summary
CVE-2006-6424 is a high (CVSS 9.0) vulnerability in novell netmail. EPSS estimates a 60.30% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 27-12-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow; and (2) via crafted arguments to the STOR command to the Network Messaging Application Protocol (NMAP) daemon, resulting in a stack overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
60.30%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.83 pp
From 59.47% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundNovell NetMail 3.52d - NMAP STOR Buffer Overflow (Metasploit)
Maturity: weaponized
Novell NetMail NMAP STOR Buffer Overflow
exploit/windows/novell/nmap_stor
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Novell1 product
- netmail≤ 3.5.2 | 3.0.1 | 3.0.3a:a | 3.0.3a:b | 3.1 | 3.1:f | 3.5 | 3.10 | 3.10:a | 3.10:b | 3.10:c | 3.10:d | 3.10:e | 3.10:f | 3.10:g | 3.10:h
1 vendor · 1 product
References
14 links- secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.htmlX Refsource CONFIRMPatch