CVE-2006-0447
- State
- Published
- Severity
- Not scored
- Published
- Jan 27, 2006
- Updated
- Aug 7, 2024
- Reserved
- Jan 26, 2006
Description
Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a long username to the (1) AUTH PLAIN or (2) AUTH LOGIN SMTP commands, which is not properly handled by (a) EPSTRS.EXE or (b) SPA-RS.EXE; (3) a long username in the APOP POP3 command, which is not properly handled by (c) EPSTPOP4S.EXE or (d) SPA-POP3S.EXE; (4) a long IMAP DELETE command, which is not properly handled by (e) EPSTIMAP4S.EXE or (f) SPA-IMAP4S.EXE.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2006-0318vdb-entry
- http://secunia.com/secunia_research/2006-1/advisory/
- 22761vdb-entry
- 18480third-party-advisory
- 22763vdb-entry
- epost-smtp-username-bo(24331)vdb-entry
- epost-imap-mailbox-dos(24334)vdb-entry
- epost-pop3-username-bo(24333)vdb-entry
- 16379vdb-entry
- 22762vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.