PT-2006-2145 · Aardvark · Bmail

Published 2006-03-09 · Updated 2017-07-20 · CVE-2006-1118

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions bmail versions prior to Aardvark PR9.1

Description The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving GBK character sets.

Recommendations For bmail versions prior to Aardvark PR9.1, update to Aardvark PR9.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-1118

Affected Products

Bmail

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-1118 · Security Note
• http://secunia.com/advisories/19147 · Vendor Advisory
• http://sourceforge.net/project/shownotes.php?group_id=144412&release_id=399256 · Patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1118 · Note
• http://vupen.com/english/advisories/2006/0863 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25073 · Note