iDefense Security Advisory 12.23.06 – Remote exploitation of a buffer overflow vulnerability in Novell Inc.’s NetMail IMAP daemon allows authenticated attackers to execute arbitrary code with the privileges of the underlying user. Once logged in, attackers can execute the “subscribe” command with an overly long argument string to overflow a stack based buffer. iDefense has confirmed the existence of the vulnerability in version 3.52d of Novell NetMail. It is suspected that earlier versions of NetMail are also affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/53276/12.23.06-1.txt
Source: https://packetstormsecurity.com/files/53276/iDEFENSE-Security-Advisory-2006-12-23.1.html