NVD

Id
64079  
Name
CVE-2006-5478  
Description
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors related to a username containing a . (dot) character in the (2) SMTP, (3) POP, (4) IMAP, (5) HTTP, or (6) Networked Messaging Application Protocol (NMAP) Netmail services.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-10-24  
Modified Date
2011-09-06  
Seq
2006-5478  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
334287 64079 CVE-2006-5478 20061028 ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability  View
334288 64079 CVE-2006-5478 20061028 ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability  View
334289 64079 CVE-2006-5478 1017125  View
334290 64079 CVE-2006-5478 1017141  View
334291 64079 CVE-2006-5478 http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974600.htm  View
334292 64079 CVE-2006-5478 http://www.mnin.org/advisories/2006_novell_httpstk.pdf  View
334293 64079 CVE-2006-5478 http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3723994&sliceId=SAL_Public&dialogID=16776123&stateId=1%200%202648401  View
334294 64079 CVE-2006-5478 20061026 ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability  View
334295 64079 CVE-2006-5478 20061028 Re: [Full-disclosure] ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability  View
334296 64079 CVE-2006-5478 20061103 ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability  View
334297 64079 CVE-2006-5478 20655  View
334298 64079 CVE-2006-5478 20853  View
334299 64079 CVE-2006-5478 ADV-2006-4141  View
334300 64079 CVE-2006-5478 http://www.zerodayinitiative.com/advisories/ZDI-06-035.html  View
334301 64079 CVE-2006-5478 http://www.zerodayinitiative.com/advisories/ZDI-06-036.html  View
334302 64079 CVE-2006-5478 https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60041 JVNDB-2006-002307 Novell eDirectory および Novell NetMail におけるスタックベースのバッファオーバーフローの脆弱性 Novell eDirectory および Novell NetMail には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2006-5478 21580 CVE-2006-5478 64079 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002307.html 2006-10-24 2012-09-25 View