CVE-2006-6605

2006-12-1919:28:00

[email protected]

web.nvd.nist.gov

cve-2006-6605

mailenable

buffer overflow

vulnerability

nvd

pop service

arbitrary code

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.508 Medium

EPSS

Percentile

97.5%

JSON

Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command.

Affected configurations

NVD

Node

mailenablemailenable_enterpriseRange≤2.35

mailenablemailenable_enterpriseMatch1.41

mailenablemailenable_professionalRange≤2.35

mailenablemailenable_professionalMatch1.84

mailenablemailenable_standardRange≤1.98

CPENameOperatorVersion
mailenable:mailenable_enterprisemailenable mailenable enterprisele2.35
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.41
mailenable:mailenable_professionalmailenable mailenable professionalle2.35
mailenable:mailenable_professionalmailenable mailenable professionaleq1.84
mailenable:mailenable_standardmailenable mailenable standardle1.98

CPE	Name	Operator	Version
mailenable:mailenable_enterprise	mailenable mailenable enterprise	le	2.35
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.41
mailenable:mailenable_professional	mailenable mailenable professional	le	2.35
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.84
mailenable:mailenable_standard	mailenable mailenable standard	le	1.98