PT-2006-3087 · Bl4 · Bl4 Smtp Server

Dedi Dwianto · Published 2006-04-29 · Updated 2018-10-18 · CVE-2006-2107

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BL4 SMTP Server versions 0.1.4 and earlier

Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via a long argument to the (1) EHLO, (2) MAIL FROM, and (3) RCPT TO commands.

Recommendations For versions 0.1.4 and earlier, consider disabling the EHLO, MAIL FROM, and RCPT TO commands until a patch is available to prevent potential exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-2107

Affected Products

Bl4 Smtp Server

References · 7

• 🔥 http://advisories.echo.or.id/adv/adv30-theday-2006.txt · Exploit
• 🔥 http://securityfocus.com/bid/17714 · Exploit
• 🔥 https://exploit-db.com/exploits/1721 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-2107 · Security Note
• http://securityfocus.com/archive/1/432329/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26114 · Note
• http://securityreason.com/securityalert/809 · Note