Lucene search

[email protected]CVE-2006-0449

HistoryJan 27, 2006 - 12:03 a.m.

CVE-2006-0449

2006-01-2700:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-0449

imap

e-post mail

spa-pro mail

vulnerability

denial of service

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.021 Low

EPSS

Percentile

89.2%

JSON

Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote attackers to cause a denial of service (infinite loop) by sending an APPEND command and disconnecting before the expected amount of data is sent.

CPENameOperatorVersion
e-post_corporation:mail_servere-post corporation mail servereq4.05
e-post_corporation:spa-pro_mail_atsolomone-post corporation spa-pro mail atsolomoneq4.05

CPE	Name	Operator	Version
e-post_corporation:mail_server	e-post corporation mail server	eq	4.05
e-post_corporation:spa-pro_mail_atsolomon	e-post corporation spa-pro mail atsolomon	eq	4.05

References

secunia.com/advisories/18480

secunia.com/secunia_research/2006-1/advisory/

www.osvdb.org/22766

www.securityfocus.com/bid/16379

www.vupen.com/english/advisories/2006/0318

exchange.xforce.ibmcloud.com/vulnerabilities/24341

7.5 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.021 Low

EPSS

Percentile

89.2%

JSON

Related for CVE-2006-0449

prion1