PT-2006-5149 · Cgi Rescue · Cgi-Rescue Mail F/W System

Published 2006-08-24 · Updated 2011-03-08 · CVE-2006-4344

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CGI-Rescue Mail F/W System versions prior to 8.3

Description The issue allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in (1) "mail.cgi" and (2) "query.cgi" API endpoints.

Recommendations For versions prior to 8.3, update to version 8.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-4344

Affected Products

Cgi-Rescue Mail F/W System

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-4344 · Security Note
• http://securityfocus.com/bid/19676 · Patch
• http://jvn.jp/jp/JVN%2311048526/index.html · Patch
• http://osvdb.org/28131 · Patch
• http://secunia.com/advisories/21543 · Vendor Advisory
• http://rescue.ne.jp/whatsnew/blog.cgi/permalink/20060822210549 · Patch
• http://vupen.com/english/advisories/2006/3359 · Note