CVE-2007-1350

Related Files

Zero Day Initiative Advisory 07-09

Posted Mar 9, 2007

Authored by Tipping Point | Site zerodayinitiative.com

A vulnerability allows remote attackers to execute arbitrary code on Novell NetMail version 3.5.2. Authentication is not required to exploit this vulnerability. The specific flaw exists in the webadmin.exe process bound by default on TCP port 89. During HTTP Basic authentication, a long username of at least 213 bytes will trigger a stack based buffer overflow due to a vulnerable sprintf() call. Exploitation of this issue can result in arbitrary code execution.

tags | advisory, remote, web, overflow, arbitrary, tcp, code execution

advisories | CVE-2007-1350

SHA-256 | ffb6df8237fe772875dbde8970d3255dc11ed6808126cdb08a3ecb0b4b34fa8b

Download | Favorite | View