CVE-2006-6484

high

Description

The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise Edition 1.1 through 1.40 allows remote attackers to cause a denial of service (crash) via unspecified vectors that trigger a null pointer dereference, as addressed by the ME-10023 hotfix, and a different issue than CVE-2006-6423. NOTE: some details were obtained from third party information.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/30797

http://www.securityfocus.com/bid/21493

http://www.mailenable.com/hotfix/

http://secunia.com/advisories/23267

Details

Source: Mitre, NVD

Published: 2006-12-12

Updated: 2017-07-29

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High