7.8
CVE-2007-6573
- EPSS 1.61%
- Veröffentlicht 28.12.2007 21:46:00
- Zuletzt bearbeitet 16.06.2026 22:48:21
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginQK SMTP Server 3 allows remote attackers to cause a denial of service (daemon crash) via a long (1) HELO, (2) MAIL FROM, or (3) RCPT TO command; or (4) a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.61% | 0.728 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://osvdb.org/43533
http://securityreason.com/securityalert/3494
http://www.securityfocus.com/archive/1/485026/100/100/threaded