PT-2006-3724 · Apache · Apache James

Ahmad Muammar W.K + 1 · Publicado 2006-06-05 · Atualizado 2018-10-18 · CVE-2006-2806

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Apache Java Mail Enterprise Server (aka Apache James) version 2.2.0

Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by sending a long argument to the MAIL command in the SMTP server.

Recommendations For Apache Java Mail Enterprise Server (aka Apache James) version 2.2.0, consider restricting access to the SMTP server or limiting the length of arguments to the MAIL command as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-2806

Produtos afetados

Apache James

Referências · 6

• 🔥 http://advisories.echo.or.id/adv/adv31-y3dips-2006.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2806 · Nota de Segurança
• http://securityfocus.com/bid/18138 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26786 · Nota
• http://securityfocus.com/archive/1/435278/100/0/threaded · Nota
• http://securityreason.com/securityalert/1038 · Nota