Description
Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username during HTTP Basic authentication.
References
- 24445 third-party-advisory
- ADV-2007-0870 vdb-entry
- 20070307 ZDI-07-009: Novell Netmail WebAdmin Buffer Overflow Vulnerability mailing-list
- 1017734 vdb-entry
- VU#919369 third-party-advisory
- 22857 vdb-entry
- http://download.novell.com/Download?buildid=sMYRODW09pw
- 2395 third-party-advisory
- netmail-sprintf-bo(32861) vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-009.html