Description
Stack-based buffer overflow in the NMAP Agent for Novell NetMail 3.52C and possibly earlier versions allows local users to execute arbitrary code via a long user name in the USER command.
References
- netmail-nmap-user-bo(22727) vdb-entry
- 1015048 vdb-entry
- 15080 vdb-entry
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972340.htm
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972433.htm
- 19916 vdb-entry
- http://secunia.com/secunia_research/2005-23/advisory/
- 15925 third-party-advisory
- 20051012 Secunia Research: Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability mailing-list
- http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972438.htm