Novell Netmail IMAP SUBSCRIBE缓冲区溢出漏洞

Novell Netmail是一款电子邮件和日历系统。 Novell Netmail包含的IMAP实现处理subscribe命令存在设计缺陷，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 当超长字符串作为subscribe的参数提交给服务器，可导致应用程序由于缺少正确边界检查而造成缓冲区溢出，精心构建提交数据，可能以进程权限执行任意指令。 Novell NetMail 3.52 D Novell NetMail 3.52 C1 Novell NetMail 3.52 C Novell NetMail 3.52 B Novell NetMail 3.52 A Novell NetMail 3.52 补丁下载： Novell NetMail 3.52 * Novell nm352e_ftf2_lx.tgz NetMail 3.52e ftf 2 Linux <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_lx.tgz * Novell nm352e_ftf2_nw.zip NetMail 3.52e ftf 2 NetWare <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_nw.zip * Novell nm352e_ftf2_win.zip NetMail 3.52e ftf 2 Windows <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_win.zip Novell NetMail 3.52 A * Novell nm352e_ftf2_lx.tgz NetMail 3.52e ftf 2 Linux <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_lx.tgz * Novell nm352e_ftf2_nw.zip NetMail 3.52e ftf 2 NetWare <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_nw.zip * Novell nm352e_ftf2_win.zip NetMail 3.52e ftf 2 Windows <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_win.zip Novell NetMail 3.52 C * Novell nm352e_ftf2_lx.tgz NetMail 3.52e ftf 2 Linux <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_lx.tgz * Novell nm352e_ftf2_nw.zip NetMail 3.52e ftf 2 NetWare <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_nw.zip * Novell nm352e_ftf2_win.zip NetMail 3.52e ftf 2 Windows <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_win.zip Novell NetMail 3.52 D * Novell nm352e_ftf2_lx.tgz NetMail 3.52e ftf 2 Linux <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_lx.tgz * Novell nm352e_ftf2_nw.zip NetMail 3.52e ftf 2 NetWare <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_nw.zip * Novell nm352e_ftf2_win.zip NetMail 3.52e ftf 2 Windows <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_win.zip Novell NetMail 3.52 B * Novell nm352e_ftf2_lx.tgz NetMail 3.52e ftf 2 Linux <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_lx.tgz * Novell nm352e_ftf2_nw.zip NetMail 3.52e ftf 2 NetWare <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_nw.zip * Novell nm352e_ftf2_win.zip NetMail 3.52e ftf 2 Windows <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_win.zip Novell NetMail 3.52 C1 * Novell nm352e_ftf2_lx.tgz NetMail 3.52e ftf 2 Linux <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_lx.tgz * Novell nm352e_ftf2_nw.zip NetMail 3.52e ftf 2 NetWare <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_nw.zip * Novell nm352e_ftf2_win.zip NetMail 3.52e ftf 2 Windows <a href="http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft" target="_blank">http://support.novell.com/servlet/downloadfile?file=/sec/pub/nm352e_ft</a> f2_win.zip