CVE-2005-3314
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Novell NetMail是基于Internet标准消息和安全协议的邮件和日历系统。 由于没有正确的过滤用户输入，Novell NetMail的IMAPD中存在缓冲区溢出漏洞，可能允许攻击者远程执行任意代码。
Public Exploits 2
ExploitDB · 1
EDB-16483 [remote]
Metasploit · 1
novell_netmail_status.rb [exploit]
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2005-3314
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Novell NetMail IMAPD缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Novell NetMail是基于Internet标准消息和安全协议的邮件和日历系统。 由于没有正确的过滤用户输入，Novell NetMail的IMAPD中存在缓冲区溢出漏洞，可能允许攻击者远程执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2005-3314
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2005-3314
请登录查看更多情报信息。
Vendor Advisories for CVE-2005-3314 (6)
-
http://www.zerodayinitiative.com/advisories/ZDI-05-003.html x_refsource_MISC
-
-
-
-
-
Other References for CVE-2005-3314 (3)
-
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972672.htm x_refsource_CONFIRM
-
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972673.htm x_refsource_CONFIRM
-
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972665.htm x_refsource_CONFIRM
Same Patch Batch · n/a · 2005-11-18 · 39 CVEs total
| CVE-2005-2976 | GTK+ gdk-pixbuf XPM图形渲染库io-xpm整数溢出漏洞 | |
| CVE-2005-3673 | Check Point 产品IKE未明的拒绝服务漏洞 | |
| CVE-2005-3674 | Sun Solaris LibIKE库 IKE 拒绝服务漏洞 | |
| CVE-2005-1925 | TikiWiki 多个目录遍历漏洞 | |
| CVE-2005-2929 | Lynx URI处理器任意命令执行漏洞 | |
| CVE-2005-2936 | RealNetworks RealPlayer Windows搜索路径漏洞 | |
| CVE-2005-2938 | APPLE iTunes非上市Windows搜索路径漏洞 | |
| CVE-2005-2939 | VMWare VMWare Workstation WINDOWS搜索路径漏洞 | |
| CVE-2005-2940 | Microsoft Antispyware非上市WINDOWS搜索路径漏洞 | |
| CVE-2005-2975 | GTK+ gdk-pixbuf XPM图形渲染库io-xpm拒绝服务漏洞 | |
| CVE-2005-3672 | Stonesoft StoneGate Firewall IKE 拒绝服务漏洞 | |
| CVE-2005-3116 | Veritas NetBackup卷管理器守护程序溢出漏洞 | |
| CVE-2005-3186 | GTK+ gdk-pixbuf XPM图形渲染库整数溢出漏洞 | |
| CVE-2005-3663 | Kaspersky Anti-Virus 未引用的Windows搜索路径漏洞 | |
| CVE-2005-3664 | Kaspersky杀毒引擎CHM文件解析器远程溢出漏洞 | |
| CVE-2005-3189 | Qualcomm Worldmail服务器目录遍历漏洞 | |
| CVE-2005-3347 | phpSysInfo index.php多个目录遍历漏洞 | |
| CVE-2005-3348 | PHPsysInfo index.php响应分割漏洞 | |
| CVE-2005-3662 | PNMToPNG Alphas_Of_Color缓冲区溢出漏洞 | |
| CVE-2005-3682 | Wizz Forum多个SQL注入漏洞 |
Showing top 20 of 39 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2005-3314
No comments yet