Lucene search

[email protected]CVE-2006-6702

HistoryDec 23, 2006 - 1:28 a.m.

CVE-2006-6702

2006-12-2301:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-6702

cross-site scripting

xss

vulnerability

global.pm

@mail

remote attackers

web script

html

e-mail messages

5.7 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.8%

JSON

Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote attackers to inject arbitrary web script or HTML via crafted e-mail messages. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
atmail:atmail_webmailatmail atmail webmaileq4.4
atmail:atmail_webmailatmail atmail webmaileq4.3
atmail:atmail_webmailatmail atmail webmaileq4.51
atmail:atmail_webmailatmail atmail webmaileq4.1
atmail:atmail_webmailatmail atmail webmaileq4.11
atmail:atmail_webmailatmail atmail webmaille4.6
atmail:atmail_webmailatmail atmail webmaileq4.5
atmail:atmail_webmailatmail atmail webmaileq4.2

CPE	Name	Operator	Version
atmail:atmail_webmail	atmail atmail webmail	eq	4.4
atmail:atmail_webmail	atmail atmail webmail	eq	4.3
atmail:atmail_webmail	atmail atmail webmail	eq	4.51
atmail:atmail_webmail	atmail atmail webmail	eq	4.1
atmail:atmail_webmail	atmail atmail webmail	eq	4.11
atmail:atmail_webmail	atmail atmail webmail	le	4.6
atmail:atmail_webmail	atmail atmail webmail	eq	4.5
atmail:atmail_webmail	atmail atmail webmail	eq	4.2

References

kb.atmail.com/view_article.php?num=669

support.atmail.com/changelog.html

www.vupen.com/english/advisories/2006/5127

5.7 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

75.8%

JSON

Related for CVE-2006-6702

nessus1