CVE-2006-5478
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to...
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors related to a username containing a . (dot) character in the (2) SMTP, (3) POP, (4) IMAP, (5) HTTP, or (6) Networked Messaging Application Protocol (NMAP) Netmail services.
Exploit likelihood
What each source reports
NVD Score used
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors related to a username containing a . (dot) character in the (2) SMTP, (3) POP, (4) IMAP, (5) HTTP, or (6) Networked Messaging Application Protocol (NMAP) Netmail services.
- Record
CVE-2006-5478- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors related to a username containing a . (dot) character in the (2) SMTP, (3) POP, (4) IMAP, (5) HTTP, or (6) Networked Messaging Application Protocol (NMAP) Netmail services.
- Record
CVE-2006-5478- Updated
- 2026-11-02
EUVDEUVD-2006-5463 No score
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors related to a username containing a . (dot) character in the (2) SMTP, (3) POP, (4) IMAP, (5) HTTP, or (6) Networked Messaging Application Protocol (NMAP) Netmail services.
- Record
EUVD-2006-5463- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7fwm-92mv-mh6q No score
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to...
Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors related to a username containing a . (dot) character in the (2) SMTP, (3) POP, (4) IMAP, (5) HTTP, or (6) Networked Messaging Application Protocol (NMAP) Netmail services.
- Record
GHSA-7fwm-92mv-mh6q- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Novell eDirectory NDS Server - Host Header Overflow (Metasploit) | 2010-05-09 |
| Exploit-DB | Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (1) | 2006-10-21 |
| Exploit-DB | Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (2) | 2006-10-30 |
| Exploit-DB | Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (3) | 2006-10-30 |
| Metasploit | Novell eDirectory NDS Server Host Header Overflow | 2006-10-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5478 is a high vulnerability (CVSS 7.5) in Novell Edirectory, published October 24, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 85.1%, the 99th percentile. No source names a fixed version.
References
lists.grok.org.uk/pipermail/full-disclosure/2006-October/050388.html
securityfocus.com/bid/20655
mnin.org/advisories/2006_novell_httpstk.pdf
zerodayinitiative.com/advisories/ZDI-06-036.html
Show 13 moreShow less
secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html
securitytracker.com/id?1017141
vupen.com/english/advisories/2006/4141
support.novell.com/cgi-bin/search/searchtid.cgi?/2974600.htm
novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3723994&sliceId=SAL_Public&dialogID=16776123&stateId=1%200%202648401
secunia.com/advisories/22519
nvd.nist.gov/vuln/detail/CVE-2006-5478
github.com/advisories/GHSA-7fwm-92mv-mh6q