CVE-2006-5313

EPSS 0.99%
Published 17.10.2006 17:07:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtp_message parameter.  NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct SMTP session.  NOTE: this is a different type of issue than CVE-2006-5262.

Affected products Warnungen 0 Metrics 2 CWE 1 References 9

Data is provided by the National Vulnerability Database (NVD)

Hastymail ≫ Hastymail Version <= 1.5

Hastymail ≫ Hastymail Version1.0.1

Hastymail ≫ Hastymail Version1.0.2

Hastymail ≫ Hastymail Version1.1

Hastymail ≫ Hastymail Version1.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.99%	0.758

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	8	6.4	AV:N/AC:L/Au:S/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://hastymail.sourceforge.net/security.php

Patch

http://secunia.com/advisories/22308

Patch

Vendor Advisory

http://www.securityfocus.com/archive/1/453417/100/0/threaded

http://www.securityfocus.com/bid/20424

Patch

http://www.vupen.com/english/advisories/2006/3956

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/29407

https://nvd.nist.gov/vuln/detail/CVE-2006-5313

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5313

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5313

EUVD