CVE-2006-3277

2006-06-2822:00:00

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

High

0.114 Low

EPSS

Percentile

95.2%

JSON

The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument.

References

secunia.com/advisories/20790

securitytracker.com/id?1016376

www.divisionbyzero.be/?p=173

www.divisionbyzero.be/?p=174

www.mailenable.com/hotfix/mesmtpc.zip

www.osvdb.org/26791

www.securityfocus.com/archive/1/438374/100/0/threaded

www.securityfocus.com/bid/18630

www.vupen.com/english/advisories/2006/2520

exchange.xforce.ibmcloud.com/vulnerabilities/27387