Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2006-5478

Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors related to a username containing a . (dot) character in the (2) SMTP, (3) POP, (4) IMAP, (5) HTTP, or (6) Networked Messaging Application Protocol (NMAP) Netmail services.

  • Published: Oct 24, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-5478
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
novell / edirectory 8.6.2 8.6.2.x
novell / edirectory 8.5.27 8.5.27.x
novell / edirectory 8.7 8.7.x
novell / edirectory 8.0 8.0.x
novell / edirectory 8.7.3 8.7.3.x
novell / edirectory 8.5.12a 8.5.12a.x
novell / edirectory 8.5 8.5.x
novell / edirectory 8.7.3.8_presp9 8.7.3.8_presp9.x
novell / edirectory 8.7.1 8.7.1.x
novell / edirectory 8.7.1-sp1 8.7.1-sp1.x