Lucene search

[email protected]CVE-2006-6423

HistoryDec 12, 2006 - 2:28 a.m.

CVE-2006-6423

2006-12-1202:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

mailenable

imap

buffer overflow

remote code execution

cve-2006-6423

nvd

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.849 High

EPSS

Percentile

98.5%

JSON

Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.

CPENameOperatorVersion
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.1
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.16
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.32
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.41
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.17
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.39
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.11
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.23
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.19
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.18

CPE	Name	Operator	Version
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.1
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.16
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.32
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.41
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.17
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.39
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.11
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.23
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.19
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.18

Rows per page:

1-10 of 341

References

secunia.com/advisories/23201

secunia.com/secunia_research/2006-73/advisory/

securityreason.com/securityalert/2022

www.mailenable.com/hotfix/

www.securityfocus.com/archive/1/454075/100/0/threaded

www.securityfocus.com/bid/21492

exchange.xforce.ibmcloud.com/vulnerabilities/30796

8.2 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.849 High

EPSS

Percentile

98.5%

JSON

Related for CVE-2006-6423

packetstorm1 checkpoint_advisories1 cve2 nessus1 prion1