IMAP.APPEND.Date.Buffer.Overflow

Description

It indicate a detection of malformed APPEND command,some IMAP server implementations, Novell NetMail for example, don't sufficiently validate specific parameter to this command that may allows remote attacker to execute arbitrary code by sending a malformed APPEND command.

Affected Products

Novell NetMail 3.5.2

Impact

Execute arbitrary code in the context of affected application.

Recommended Actions

This problem is resolved by applying NetMail 3.52e ftf 2
http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ftf2_lx.tgz
http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ftf2_nw.zip
http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ftf2_win.zip

References