Lucene search
HistoryApr 04, 2006 - 2:04 p.m.
CVE-2006-0559
cve-2006-0559
format string vulnerability
mcafee webshield
smtp server
remote code execution
7.8 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.776 High
EPSS
Percentile
98.2%
Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mcafee:webshield_smtp | mcafee webshield smtp | le | 4.5 |
Related
prion
prion
Format string
2006-04-04 14:04:00
checkpoint_advisories
checkpoint_advisories
McAfee WebShield SMTP Bounce Message Format String (CVE-2006-0559)
2010-02-21 00:00:00
securityvulns
securityvulns
SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability
2006-04-04 00:00:00
7.8 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.776 High
EPSS
Percentile
98.2%
Related for CVE-2006-0559