CVE-2007-2616 - Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2

CVE-2007-2616

Summary

Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote attackers to execute arbitrary code via a crafted request.

References

Vulnerable Configurations

cpe:2.3:a:novell:netmail:3.52:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52a:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52a:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52b:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52b:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52c:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52c:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52c1:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52c1:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52d:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52d:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52e:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52e:*:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52e:ftf1:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52e:ftf1:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52e:ftf2:*:*:*:*:*:*
cpe:2.3:a:novell:netmail:3.52e:ftf2:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 29-07-2017 - 01:31)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	23916
idefense	20070510 Novell NetMail NMDMC Buffer Overflow Vulnerability
misc	http://download.novell.com/Download?buildid=Ad2xk29hHTg~
osvdb	35941
sectrack	1018045
secunia	25204
vupen	ADV-2007-1732
xf	netmail-nmdmc-bo(34221)

Last major update

29-07-2017 - 01:31

Published

11-05-2007 - 16:19

Last modified

29-07-2017 - 01:31