CVE-2006-0447
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.6%
Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a long username to the (1) AUTH PLAIN or (2) AUTH LOGIN SMTP commands, which is not properly handled by (a) EPSTRS.EXE or (b) SPA-RS.EXE; (3) a long username in the APOP POP3 command, which is not properly handled by (c) EPSTPOP4S.EXE or (d) SPA-POP3S.EXE; (4) a long IMAP DELETE command, which is not properly handled by (e) EPSTIMAP4S.EXE or (f) SPA-IMAP4S.EXE.
Produtos afetados
n/a · n/aReferências
http://secunia.com/advisories/18480http://secunia.com/secunia_research/2006-1/advisory/https://exchange.xforce.ibmcloud.com/vulnerabilities/24331https://exchange.xforce.ibmcloud.com/vulnerabilities/24333https://exchange.xforce.ibmcloud.com/vulnerabilities/24334http://www.osvdb.org/22761http://www.osvdb.org/22762http://www.osvdb.org/22763http://www.securityfocus.com/bid/16379http://www.vupen.com/english/advisories/2006/0318