Unscored severity · published Jun 8, 2005
CVE-2005-1758
Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrary code
–
CVSS
16.1%
EPSS
No
On KEV
Description
Buffer overflow in the IMAP command continuation function in Novell NetMail 3.52 before 3.52C may allow remote attackers to execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.1% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netmail · Novell
3.0.3a; 3.0.3a; 3.1; 3.1; 3.5.2; 3.5.2; +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1758
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1758
Patch
http://secunia.com/advisories/15644
support.novell.com
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm
Patch
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm
Patch
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm
Patch
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm
www.osvdb.org
http://www.osvdb.org/17239
More from Netmail
–
CVE-2007-6302
Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows remote attackers to execute arbitrary…
–
CVE-2007-2616
Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote attackers to execute arbitrary code via a…
–
CVE-2007-1350
Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username during HTTP Basic authentication
–
CVE-2006-6761
Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via a long argument to the…
–
CVE-2006-6762
The IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to cause a denial of service via an APPEND command with a single "(" (parenthesis) in…
