Lucene search
HistoryAug 24, 2006 - 8:04 p.m.
CVE-2006-4344
crlf injection
cgi-rescue mail f/w system
formd
e-mail spoofing
e-mail headers
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.042 Low
EPSS
Percentile
92.3%
CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in (1) mail.cgi and (2) query.cgi.
Affected configurations
Node
cgi-rescuemail_f_w_systemMatch8.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| cgi-rescue:mail_f_w_system | cgi-rescue mail f w system | eq | 8.3 |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.042 Low
EPSS
Percentile
92.3%
Related for CVE-2006-4344