Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

CVE-2006-0559

Published

16 years ago

Last Modified

4 years ago

CVSSv2.0 Severity

High

Impact Analysis

Share on Facebook
Share on LinkedIn
Share on Twitter

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed..

CVSSv2.0 Score

Severity: High
Base Score: 10/10
Exploit Score: 10/10
Access Vector: Network
Access Complexity: Low
Authentication Required: None
Impact Score: 10/10
Confidentiality Impact: Complete
Availability Impact: Complete
Integrity Impact: Complete

Products Affected

CPE	Affected	Vulnerable	Excluding	Edit
cpe:2.3:a:mcafee:webshield_smtp::mr2_patch::::::*	Yes	-	-

References

http://www.securityfocus.com/bid/16742
http://secunia.com/advisories/19491
http://securitytracker.com/id?1015861
http://www.osvdb.org/24366
http://securityreason.com/securityalert/671
http://www.vupen.com/english/advisories/2006/1219
https://exchange.xforce.ibmcloud.com/vulnerabilities/25621
http://www.securityfocus.com/archive/1/429812/100/0/threaded