CVE-2006-5478

CVE-2006-5478 describes multiple stack-based buffer overflows in Novell eDirectory versions 8.8.x before 8.8.1 FTF1 and 8.x up to 8.7.3.8, as well as Novell NetMail before 3.52e FTF2. These vulnerabilities allow remote attackers to execute arbitrary code through a long HTTP Host header or by using a username containing a dot character in various Netmail services. The vulnerability has a CVSS score of 7.5, indicating high severity, and an EPSS score of 0.91286, suggesting a high likelihood of exploitation. It is easily exploitable over the network without authentication, potentially leading to complete compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, exploit modules are publicly available in Metasploit and ExploitDB, indicating a clear path for attackers. Despite the availability of exploit code, there is no significant community discussion or media coverage surrounding this CVE.