CVE-2006-6291

CVSS V2 Medium 6.8 CVSS V3 None
Description
Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service (crash) via a long argument containing * (asterisk) and ? (question mark) characters to the DELETE command, as addressed by the ME-10020 hotfix.
Overview
  • CVE ID
  • CVE-2006-6291
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2006-12-05T11:28:00
  • Last Modified Date
  • 2019-10-03T17:22:23
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise:*:*:* 1 OR 1.1 1.40
cpe:2.3:a:mailenable:mailenable:*:*:*:*:professional:*:*:* 1 OR 1.6 1.83
cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise:*:*:* 1 OR 2.0 2.33
cpe:2.3:a:mailenable:mailenable:*:*:*:*:professional:*:*:* 1 OR 2.0 2.33
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:S/C:N/I:N/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • SINGLE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 6.8
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8
  • Impact Score
  • 6.9
References
Reference URL Reference Tags
http://secunia.com/secunia_research/2006-71/advisory/ Vendor Advisory
http://www.mailenable.com/hotfix/ Patch
http://securitytracker.com/id?1017276 Third Party Advisory VDB Entry
http://secunia.com/advisories/23080 Patch Vendor Advisory
http://securitytracker.com/id?1017319 Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/21362 Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2006/4778 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/30614 VDB Entry
http://www.securityfocus.com/archive/1/453118/100/100/threaded Third Party Advisory VDB Entry
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2006-6291
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6291
History
Created Old Value New Value Data Type Notes
2022-05-10 17:16:07 Added to TrackCVE