PT-2007-1276 · Mailenable · Mailenable Enterprise Edition+2

Published 2007-02-12 · Updated 2008-09-05 · CVE-2006-6997

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MailEnable Standard Edition versions prior to 1.93 MailEnable Professional Edition versions prior to 1.73 MailEnable Enterprise Edition versions prior to 1.21

Description The issue is related to an unspecified vulnerability in a cryptographic feature, leading to weakened authentication security. The impact and attack vectors of this issue are unknown due to a lack of details.

Recommendations For MailEnable Standard Edition versions prior to 1.93, update to version 1.93 or later. For MailEnable Professional Edition versions prior to 1.73, update to version 1.73 or later. For MailEnable Enterprise Edition versions prior to 1.21, update to version 1.21 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2006-6997

Affected Products

Mailenable Enterprise Edition

Mailenable Professional Edition

Mailenable Standard Edition

References · 5

• http://mailenable.com/professionalhistory.asp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6997 · Security Note
• http://mailenable.com/enterprisehistory.asp · Vendor Advisory
• http://mailenable.com/standardhistory.asp · Vendor Advisory
• http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html · Vendor Advisory