Lucene search

[email protected]CVE-2006-4616

HistorySep 07, 2006 - 12:04 a.m.

CVE-2006-4616

2006-09-0700:04:00

[email protected]

web.nvd.nist.gov

cve-2006-4616

mailenable

smtp service

denial of service

spf lookup

null pointer exception

nvd

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.19 Low

EPSS

Percentile

96.3%

JSON

SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 (20060904) allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception.

Affected configurations

NVD

Node

mailenablemailenable_enterprise

mailenablemailenable_professional

mailenablemailenable_standard

CPENameOperatorVersion
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq*
mailenable:mailenable_professionalmailenable mailenable professionaleq*
mailenable:mailenable_standardmailenable mailenable standardeq*

CPE	Name	Operator	Version
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	*
mailenable:mailenable_professional	mailenable mailenable professional	eq	*
mailenable:mailenable_standard	mailenable mailenable standard	eq	*

References

secunia.com/advisories/21998

securitytracker.com/id?1016792

www.mailenable.com/hotfix/

www.mailenable.com/hotfix/MESMTPC.ZIP

www.securityfocus.com/bid/20091

www.vupen.com/english/advisories/2006/3669

exchange.xforce.ibmcloud.com/vulnerabilities/28910

6.7 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.19 Low

EPSS

Percentile

96.3%

JSON

Related for CVE-2006-4616

nvd1 nessus1 cvelist1