CVE-2006-6425

high

Description

Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via unspecified vectors involving the APPEND command.

References

https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html

http://www.zerodayinitiative.com/advisories/ZDI-06-054.html

http://www.vupen.com/english/advisories/2006/5134

http://www.securityfocus.com/bid/21723

http://www.securityfocus.com/archive/1/455200/100/0/threaded

http://www.kb.cert.org/vuls/id/258753

http://securitytracker.com/id?1017437

http://securityreason.com/securityalert/2080

http://secunia.com/advisories/23437

Details

Source: Mitre, NVD

Published: 2006-12-27

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H