CVE-2006-6423

50Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 69%

de la publicación al arma66 días

Publicada en NVD12 dic

1ª PoC+66d

metasploit11 dic

probabilidad de explotación

69%top 1% de las CVE

explotación observada

noninguna fuente lo reporta

3 exploit(s) público(s)

Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 3

exploitdbwww.exploit-db.com/exploits/3319no verificado exploitdbwww.exploit-db.com/exploits/16475no verificado exploitdbwww.exploit-db.com/exploits/3320no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://secunia.com/advisories/23201 http://secunia.com/secunia_research/2006-73/advisory/http://securityreason.com/securityalert/2022 https://exchange.xforce.ibmcloud.com/vulnerabilities/30796 http://www.mailenable.com/hotfix/http://www.securityfocus.com/archive/1/454075/100/0/threaded http://www.securityfocus.com/bid/21492