Lucene search

K
cveMitreCVE-2006-0631
HistoryFeb 10, 2006 - 11:02 a.m.

CVE-2006-0631

2006-02-1011:02:00
mitre
web.nvd.nist.gov
24
crlf injection
mailback.pl
erik c. thauvin
mail security
cve-2006-0631

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.039

Percentile

92.0%

CRLF injection vulnerability in mailback.pl in Erik C. Thauvin mailback allows remote attackers to use mailback as a “spam proxy” by modifying mail headers, including recipient e-mail addresses, via newline characters in the Subject field.

Affected configurations

Nvd
Node
erik_c._thauvinmailback
VendorProductVersionCPE
erik_c._thauvinmailback*cpe:2.3:a:erik_c._thauvin:mailback:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.039

Percentile

92.0%

Related for CVE-2006-0631