CVE-2006-6424

Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow; and (2) via crafted arguments to the STOR command to the Network Messaging Application Protocol (NMAP) daemon, resulting in a stack overflow.

• http://secunia.com/advisories/23437Patch, Vendor Advisory
• http://securityreason.com/securityalert/2081
• http://securitytracker.com/id?1017437Patch
• http://www.cirt.dk/advisories/cirt-48-advisory.txtPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/381161US Government Resource
• http://www.kb.cert.org/vuls/id/912505US Government Resource
• http://www.securityfocus.com/archive/1/455201/100/0/threaded
• http://www.securityfocus.com/archive/1/455202/100/0/threaded
• http://www.securityfocus.com/bid/21724
• http://www.securityfocus.com/bid/21725
• http://www.vupen.com/english/advisories/2006/5134
• http://www.zerodayinitiative.com/advisories/ZDI-06-052.htmlPatch, Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-06-053.htmlPatch, Vendor Advisory
• https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.htmlPatch
• http://secunia.com/advisories/23437Patch, Vendor Advisory
• http://securityreason.com/securityalert/2081
• http://securitytracker.com/id?1017437Patch
• http://www.cirt.dk/advisories/cirt-48-advisory.txtPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/381161US Government Resource
• http://www.kb.cert.org/vuls/id/912505US Government Resource
• http://www.securityfocus.com/archive/1/455201/100/0/threaded
• http://www.securityfocus.com/archive/1/455202/100/0/threaded
• http://www.securityfocus.com/bid/21724
• http://www.securityfocus.com/bid/21725
• http://www.vupen.com/english/advisories/2006/5134
• http://www.zerodayinitiative.com/advisories/ZDI-06-052.htmlPatch, Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-06-053.htmlPatch, Vendor Advisory
• https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.htmlPatch

Published

Dec 27, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6418Buffer overflow in the POSIX Threads library (libpthread) on…
• CVE-2006-6419jce.php in the JCE Admin Component in Ryan Demmer Joomla Con…
• CVE-2006-6420Multiple cross-site scripting (XSS) vulnerabilities in jce.p…
• CVE-2006-6421Cross-site scripting (XSS) vulnerability in the private mess…
• CVE-2006-6422Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly…
• CVE-2006-6423Stack-based buffer overflow in the IMAP service for MailEnab…
• CVE-2006-6425Stack-based buffer overflow in the IMAP daemon (IMAPD) in No…
• CVE-2006-6426PHP remote file inclusion vulnerability in design/thinkedit/…
• CVE-2006-6427The Web User Interface in Xerox WorkCentre and WorkCentre Pr…
• CVE-2006-6428Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13…
• CVE-2006-6429Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13…
• CVE-2006-6430Web services in Xerox WorkCentre and WorkCentre Pro before 1…