PT-2006-1210 · Mailma · Mail Management Agent

Published 2006-01-09 · Updated 2008-09-05 · CVE-2006-0130

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Mail Management Agent (MAILMA) versions 7.0.3.1 and earlier

Description: The issue allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account.

Recommendations: For Mail Management Agent (MAILMA) versions 7.0.3.1 and earlier, consider implementing rate limiting or account lockout policies to mitigate the risk of brute-force authentication attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2006-0130

Affected Products

Mail Management Agent

References · 3

• http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt · Vendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0130 · Security Note