CVE-2006-5478: Novell Edirectory

High severity, CVSS 7.5. EPSS: 85.1% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors related to a username containing a . (dot) character in the (2) SMTP, (3) POP, (4) IMAP, (5) HTTP, or (6) Networked Messaging Application Protocol (NMAP) Netmail services.

Affected products

• Novell Edirectory: version 8.0 only; version 8.5 only; version 8.5.12a only; version 8.5.27 only; version 8.6.2 only; version 8.7 only; …

Published 2006-10-24. Last modified 2026-06-16.