Lucene search

K
cveMitreCVE-2006-2107
HistoryApr 29, 2006 - 10:02 a.m.

CVE-2006-2107

2006-04-2910:02:00
mitre
web.nvd.nist.gov
26
cve-2006-2107
buffer overflow
bl4 smtp server
denial of service
remote attackers
arbitrary code
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

High

EPSS

0.119

Percentile

95.3%

Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the (1) EHLO, (2) MAIL FROM, and (3) RCPT TO commands.

Affected configurations

Nvd
Node
bl4smtp_serverRange0.1.4
VendorProductVersionCPE
bl4smtp_server*cpe:2.3:a:bl4:smtp_server:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

High

EPSS

0.119

Percentile

95.3%

Related for CVE-2006-2107