CVE-2007-2616 Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote attackers to execute arbitrary code via a crafted request.
HighCVSS 10.0
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote attackers to execute arbitrary code via a crafted request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| novell netmail | = 3.52 | No fix listed |
| novell netmail | = 3.52a | No fix listed |
| novell netmail | = 3.52b | No fix listed |
| novell netmail | = 3.52c | No fix listed |
| novell netmail | = 3.52c1 | No fix listed |
| novell netmail | = 3.52d | No fix listed |
| novell netmail | = 3.52e | No fix listed |
| novell netmail | = 3.52e-ftf1 | No fix listed |
| novell netmail | = 3.52e-ftf2 | No fix listed |
References
- download.novell.com patch
- 20070510 Novell NetMail NMDMC Buffer Overflow Vulnerability third-party-advisory
- 35941 vdb-entry
- 25204 patch third-party-advisory vendor-advisory
- 23916 patch vdb-entry
- 1018045 vdb-entry
- ADV-2007-1732 vdb-entry
- netmail-nmdmc-bo(34221) vdb-entry