Lucene search

K
cveMitreCVE-2006-1255
HistoryMar 19, 2006 - 1:02 a.m.

CVE-2006-1255

2006-03-1901:02:00
mitre
web.nvd.nist.gov
32
cve-2006-1255
buffer overflow
imap
mercur messaging
remote attack
denial of service
arbitrary code
security vulnerability

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.893

Percentile

98.8%

Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string to the (1) LOGIN or (2) SELECT command, a different set of attack vectors and possibly a different vulnerability than CVE-2003-1177.

Affected configurations

Nvd
Node
mercurmercur_messagingRange2005_5.0_sp3
VendorProductVersionCPE
mercurmercur_messaging*cpe:2.3:a:mercur:mercur_messaging:*:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.893

Percentile

98.8%