CVE-2006-6424

CVE-2006-6424 describes multiple buffer overflow vulnerabilities in Novell NetMail before version 3.52e FTF2. Specifically, a heap overflow can occur via crafted IMAP command continuation requests, and a stack overflow can be triggered by malformed arguments to the NMAP STOR command. This vulnerability carries a critical CVSS score of 9.0, indicating a high-impact remote attack that, with successful authentication, allows for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild, public exploit code exists, including a Metasploit module, suggesting a high potential for exploitation.