PT-2007-1276 · Mailenable · Mailenable Enterprise Edition+2

Publicado 2007-02-12 · Atualizado 2008-09-05 · CVE-2006-6997

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MailEnable Standard Edition versions prior to 1.93 MailEnable Professional Edition versions prior to 1.73 MailEnable Enterprise Edition versions prior to 1.21

Description The issue is related to an unspecified vulnerability in a cryptographic feature, leading to weakened authentication security. The impact and attack vectors of this issue are unknown due to a lack of details.

Recommendations For MailEnable Standard Edition versions prior to 1.93, update to version 1.93 or later. For MailEnable Professional Edition versions prior to 1.73, update to version 1.73 or later. For MailEnable Enterprise Edition versions prior to 1.21, update to version 1.21 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2006-6997

Produtos afetados

Mailenable Enterprise Edition

Mailenable Professional Edition

Mailenable Standard Edition

Referências · 5

• http://mailenable.com/professionalhistory.asp · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-6997 · Nota de Segurança
• http://mailenable.com/enterprisehistory.asp · Aviso do Fabricante
• http://mailenable.com/standardhistory.asp · Aviso do Fabricante
• http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html · Aviso do Fabricante