PT-2006-1210 · Mailma · Mail Management Agent

Publicado 2006-01-09 · Atualizado 2008-09-05 · CVE-2006-0130

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Mail Management Agent (MAILMA) versions 7.0.3.1 and earlier

Description: The issue allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account.

Recommendations: For Mail Management Agent (MAILMA) versions 7.0.3.1 and earlier, consider implementing rate limiting or account lockout policies to mitigate the risk of brute-force authentication attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0130

Produtos afetados

Mail Management Agent

Referências · 3

• http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt · Aviso do Fabricante
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-0130 · Nota de Segurança