Vulnerability Details : CVE-2006-6291
Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service (crash) via a long argument containing * (asterisk) and ? (question mark) characters to the DELETE command, as addressed by the ME-10020 hotfix.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2006-6291
- Mailenable » Mailenable » Professional EditionVersions from including (>=) 2.0 and up to, including, (<=) 2.33cpe:2.3:a:mailenable:mailenable:*:*:*:*:professional:*:*:*
- Mailenable » Mailenable » Enterprise EditionVersions from including (>=) 2.0 and up to, including, (<=) 2.33cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise:*:*:*
- Mailenable » Mailenable » Professional EditionVersions from including (>=) 1.6 and up to, including, (<=) 1.83cpe:2.3:a:mailenable:mailenable:*:*:*:*:professional:*:*:*
- Mailenable » Mailenable » Enterprise EditionVersions from including (>=) 1.1 and up to, including, (<=) 1.40cpe:2.3:a:mailenable:mailenable:*:*:*:*:enterprise:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-6291
0.81%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 82 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-6291
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
6.8
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:N/A:C |
8.0
|
6.9
|
NIST |
CWE ids for CVE-2006-6291
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2006-6291
-
http://www.mailenable.com/hotfix/
MailEnable - Hot Fixes Download PagePatch
-
http://www.securityfocus.com/bid/21362
Third Party Advisory;VDB Entry
-
http://securitytracker.com/id?1017276
Third Party Advisory;VDB Entry
-
http://securitytracker.com/id?1017319
Third Party Advisory;VDB Entry
-
http://www.vupen.com/english/advisories/2006/4778
Vendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/30614
VDB Entry
-
http://www.securityfocus.com/archive/1/453118/100/100/threaded
Third Party Advisory;VDB Entry
Jump to