PT-2006-3087 · Bl4 · Bl4 Smtp Server

Dedi Dwianto · Publicado 2006-04-29 · Atualizado 2018-10-18 · CVE-2006-2107

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BL4 SMTP Server versions 0.1.4 and earlier

Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via a long argument to the (1) EHLO, (2) MAIL FROM, and (3) RCPT TO commands.

Recommendations For versions 0.1.4 and earlier, consider disabling the EHLO, MAIL FROM, and RCPT TO commands until a patch is available to prevent potential exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-2107

Produtos afetados

Bl4 Smtp Server

Referências · 7

• 🔥 http://advisories.echo.or.id/adv/adv30-theday-2006.txt · Exploit
• 🔥 http://securityfocus.com/bid/17714 · Exploit
• 🔥 https://exploit-db.com/exploits/1721 · Exploit
• http://securityfocus.com/archive/1/432329/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26114 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2107 · Nota de Segurança
• http://securityreason.com/securityalert/809 · Nota