Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-2616


Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote attackers to execute arbitrary code via a crafted request.


Published

2007-05-11T16:19:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application novell netmail 3.52 Yes
Application novell netmail 3.52a Yes
Application novell netmail 3.52b Yes
Application novell netmail 3.52c Yes
Application novell netmail 3.52c1 Yes
Application novell netmail 3.52d Yes
Application novell netmail 3.52e Yes
Application novell netmail 3.52e Yes
Application novell netmail 3.52e Yes

References