Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-1225
HistoryMar 14, 2006 - 12:00 a.m.

CVE-2006-1225

2006-03-1400:00:00
ubuntu.com
ubuntu.com
6

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.026 Low

EPSS

Percentile

90.2%

CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before
4.5.8 allows remote attackers to inject headers of outgoing e-mail messages
and use Drupal as a spam proxy.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchdrupal< 4.5.8-1UNKNOWN
ubuntu6.10noarchdrupal< 4.5.8-1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.026 Low

EPSS

Percentile

90.2%

Related for UB:CVE-2006-1225