Vulnerability-Lookup

CVE-2006-0709 (GCVE-0-2006-0709)

Vulnerability from cvelistv5 – Published: 2006-02-15 11:00 – Updated: 2024-08-07 16:41

Summary

Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

16 references

URL	Tags
http://securitytracker.com/id?1015654	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/18796	third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://secunia.com/advisories/19226	third-party-advisoryx_refsource_SECUNIA
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482	x_refsource_CONFIRM
http://www.gentoo.org/security/en/glsa/glsa-20060…	vendor-advisoryx_refsource_GENTOO
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://wwwnew.mandriva.com/security/advisories?na…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/18987	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/19130	third-party-advisoryx_refsource_SECUNIA
http://www.debian.org/security/2006/dsa-995	vendor-advisoryx_refsource_DEBIAN
http://www.redhat.com/support/errata/RHSA-2006-02…	vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/19000	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/16611	vdb-entryx_refsource_BID
http://secunia.com/advisories/19304	third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2006/0565	vdb-entryx_refsource_VUPEN

Date Public

2006-02-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T16:41:29.231Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1015654",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015654"
          },
          {
            "name": "18796",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18796"
          },
          {
            "name": "SUSE-SR:2006:005",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
          },
          {
            "name": "19226",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19226"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
          },
          {
            "name": "GLSA-200603-16",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
          },
          {
            "name": "metamail-boundary-bo(24702)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
          },
          {
            "name": "MDKSA-2006:047",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
          },
          {
            "name": "18987",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/18987"
          },
          {
            "name": "19130",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19130"
          },
          {
            "name": "DSA-995",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-995"
          },
          {
            "name": "RHSA-2006:0217",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
          },
          {
            "name": "19000",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19000"
          },
          {
            "name": "16611",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/16611"
          },
          {
            "name": "19304",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19304"
          },
          {
            "name": "ADV-2006-0565",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/0565"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-02-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "1015654",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015654"
        },
        {
          "name": "18796",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18796"
        },
        {
          "name": "SUSE-SR:2006:005",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
        },
        {
          "name": "19226",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19226"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
        },
        {
          "name": "GLSA-200603-16",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
        },
        {
          "name": "metamail-boundary-bo(24702)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
        },
        {
          "name": "MDKSA-2006:047",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
        },
        {
          "name": "18987",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/18987"
        },
        {
          "name": "19130",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19130"
        },
        {
          "name": "DSA-995",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-995"
        },
        {
          "name": "RHSA-2006:0217",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
        },
        {
          "name": "19000",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19000"
        },
        {
          "name": "16611",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/16611"
        },
        {
          "name": "19304",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19304"
        },
        {
          "name": "ADV-2006-0565",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/0565"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0709",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1015654",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1015654"
            },
            {
              "name": "18796",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18796"
            },
            {
              "name": "SUSE-SR:2006:005",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
            },
            {
              "name": "19226",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19226"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
            },
            {
              "name": "GLSA-200603-16",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
            },
            {
              "name": "metamail-boundary-bo(24702)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
            },
            {
              "name": "MDKSA-2006:047",
              "refsource": "MANDRIVA",
              "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
            },
            {
              "name": "18987",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/18987"
            },
            {
              "name": "19130",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19130"
            },
            {
              "name": "DSA-995",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2006/dsa-995"
            },
            {
              "name": "RHSA-2006:0217",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
            },
            {
              "name": "19000",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19000"
            },
            {
              "name": "16611",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/16611"
            },
            {
              "name": "19304",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/19304"
            },
            {
              "name": "ADV-2006-0565",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/0565"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-0709",
    "datePublished": "2006-02-15T11:00:00.000Z",
    "dateReserved": "2006-02-15T00:00:00.000Z",
    "dateUpdated": "2024-08-07T16:41:29.231Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2006-0709",
      "date": "2026-09-19",
      "epss": "0.06414",
      "percentile": "0.93373"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:metamail_corporation:metamail:2.7.50:*:*:*:*:*:*:*",
                  "matchCriteriaId": "E6703A77-3E4D-47D7-A21B-AA658C19F87E",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105."
        }
      ],
      "id": "CVE-2006-0709",
      "lastModified": "2024-11-21T00:07:09.357",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 7.5,
              "confidentialityImpact": "PARTIAL",
              "integrityImpact": "PARTIAL",
              "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 10.0,
            "impactScore": 6.4,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": true,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2006-02-15T11:06:00.000",
      "references": [
        {
          "source": "cve@mitre.org",
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/18796"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/18987"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/19000"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/19130"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/19226"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://secunia.com/advisories/19304"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://securitytracker.com/id?1015654"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.debian.org/security/2006/dsa-995"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit",
            "Patch"
          ],
          "url": "http://www.securityfocus.com/bid/16611"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.vupen.com/english/advisories/2006/0565"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/18796"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/18987"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/19000"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/19130"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/19226"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/19304"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://securitytracker.com/id?1015654"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.debian.org/security/2006/dsa-995"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit",
            "Patch"
          ],
          "url": "http://www.securityfocus.com/bid/16611"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2006/0565"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "NVD-CWE-Other"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:metamail_corporation:metamail:2.7.50:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E6703A77-3E4D-47D7-A21B-AA658C19F87E",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105."
          }
        ],
        "id": "CVE-2006-0709",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 7.5,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": true,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2006-02-15T11:06:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/18796"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/18987"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/19000"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/19130"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/19226"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://secunia.com/advisories/19304"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securitytracker.com/id?1015654"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.debian.org/security/2006/dsa-995"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit",
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/16611"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.vupen.com/english/advisories/2006/0565"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/18796"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/18987"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/19000"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19130"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19226"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19304"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1015654"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2006/dsa-995"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Patch"
            ],
            "url": "http://www.securityfocus.com/bid/16611"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2006/0565"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2025-11-21T13:26:28+00:00",
      "cve": "CVE-2006-0709",
      "id": "CVE-2006-0709",
      "initial_release_date": "2006-02-12T00:00:00+00:00",
      "product_status:fixed": "4",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "security flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2006/cve-2006-0709.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-05-10T01:28:35Z",
      "cve": "CVE-2006-0709",
      "id": "CVE-2006-0709",
      "initial_release_date": "2023-02-15T06:16:11Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2006-0709",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2006-0709.json",
      "version": "5"
    }
  }
}

CERTA-2006-AVI-109

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité dans Metamail permet à un utilisateur distant mal intentionné de provoquer un déni de service ou d'exécuter du code arbitraire sur la machine vulnérable.

Description

Une vulnérabilité de type débordement de tampon dans Metamail permet à un utilisateur distant mal intentionné de provoquer un déni de service ou d'exécuter du code arbitraire sur la machine vulnérable par le biais d'un courrier électronique malicieusement construit.

Solution

Se référer au bulletin de sécurité des éditeurs pour l'obtention des correctifs (cf. section Documentation).

Metamail 2.7.x.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CERTA-2006-AVI-109

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité dans Metamail permet à un utilisateur distant mal intentionné de provoquer un déni de service ou d'exécuter du code arbitraire sur la machine vulnérable.

Description

Solution

Se référer au bulletin de sécurité des éditeurs pour l'obtention des correctifs (cf. section Documentation).

Metamail 2.7.x.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

FKIE_CVE-2006-0709

Vulnerability from fkie_nvd - Published: 2006-02-15 11:06 - Updated: 2026-06-16 22:21

Severity

Summary

References

URL	Tags
cve@mitre.org	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482
cve@mitre.org	http://secunia.com/advisories/18796	Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/18987	Patch, Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/19000	Patch, Vendor Advisory
cve@mitre.org	http://secunia.com/advisories/19130
cve@mitre.org	http://secunia.com/advisories/19226
cve@mitre.org	http://secunia.com/advisories/19304
cve@mitre.org	http://securitytracker.com/id?1015654
cve@mitre.org	http://www.debian.org/security/2006/dsa-995
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml
cve@mitre.org	http://www.novell.com/linux/security/advisories/2006_05_sr.html
cve@mitre.org	http://www.redhat.com/support/errata/RHSA-2006-0217.html	Patch, Vendor Advisory
cve@mitre.org	http://www.securityfocus.com/bid/16611	Exploit, Patch
cve@mitre.org	http://www.vupen.com/english/advisories/2006/0565
cve@mitre.org	http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047	Patch, Vendor Advisory
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/24702
af854a3a-2127-422b-91ae-364da2661108	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18796	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/18987	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19000	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19130
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19226
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19304
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1015654
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2006/dsa-995
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.novell.com/linux/security/advisories/2006_05_sr.html
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2006-0217.html	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/16611	Exploit, Patch
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2006/0565
af854a3a-2127-422b-91ae-364da2661108	http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/24702

Impacted products

	Vendor	Product	Version
	metamail_corporation	metamail	2.7.50

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:metamail_corporation:metamail:2.7.50:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6703A77-3E4D-47D7-A21B-AA658C19F87E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105."
    }
  ],
  "id": "CVE-2006-0709",
  "lastModified": "2026-06-16T22:21:07.680",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-02-15T11:06:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18796"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18987"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/19000"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19130"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19226"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/19304"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1015654"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2006/dsa-995"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/16611"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/0565"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18796"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/18987"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/19000"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19130"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19226"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19304"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015654"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-995"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "url": "http://www.securityfocus.com/bid/16611"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/0565"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-C93R-P92X-RRC3

Vulnerability from github – Published: 2022-05-01 06:42 – Updated: 2022-05-01 06:42

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2006-0709"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-02-15T11:06:00Z",
    "severity": "HIGH"
  },
  "details": "Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105.",
  "id": "GHSA-c93r-p92x-rrc3",
  "modified": "2022-05-01T06:42:05Z",
  "published": "2022-05-01T06:42:05Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-0709"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
    },
    {
      "type": "WEB",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18796"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/18987"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19000"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19130"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19226"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19304"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1015654"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2006/dsa-995"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/16611"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2006/0565"
    },
    {
      "type": "WEB",
      "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2006-0709

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2006-0709

Aliases

CVE-2006-0709

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2006-0709",
    "description": "Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105.",
    "id": "GSD-2006-0709",
    "references": [
      "https://www.suse.com/security/cve/CVE-2006-0709.html",
      "https://www.debian.org/security/2006/dsa-995",
      "https://access.redhat.com/errata/RHSA-2006:0217"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2006-0709"
      ],
      "details": "Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105.",
      "id": "GSD-2006-0709",
      "modified": "2023-12-13T01:19:51.027689Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2006-0709",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "1015654",
            "refsource": "SECTRACK",
            "url": "http://securitytracker.com/id?1015654"
          },
          {
            "name": "18796",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18796"
          },
          {
            "name": "SUSE-SR:2006:005",
            "refsource": "SUSE",
            "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
          },
          {
            "name": "19226",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19226"
          },
          {
            "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482",
            "refsource": "CONFIRM",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
          },
          {
            "name": "GLSA-200603-16",
            "refsource": "GENTOO",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
          },
          {
            "name": "metamail-boundary-bo(24702)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
          },
          {
            "name": "MDKSA-2006:047",
            "refsource": "MANDRIVA",
            "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
          },
          {
            "name": "18987",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/18987"
          },
          {
            "name": "19130",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19130"
          },
          {
            "name": "DSA-995",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2006/dsa-995"
          },
          {
            "name": "RHSA-2006:0217",
            "refsource": "REDHAT",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
          },
          {
            "name": "19000",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19000"
          },
          {
            "name": "16611",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/16611"
          },
          {
            "name": "19304",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/19304"
          },
          {
            "name": "ADV-2006-0565",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2006/0565"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:metamail_corporation:metamail:2.7.50:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-0709"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482",
              "refsource": "CONFIRM",
              "tags": [],
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482"
            },
            {
              "name": "16611",
              "refsource": "BID",
              "tags": [
                "Exploit",
                "Patch"
              ],
              "url": "http://www.securityfocus.com/bid/16611"
            },
            {
              "name": "18796",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/18796"
            },
            {
              "name": "MDKSA-2006:047",
              "refsource": "MANDRIVA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047"
            },
            {
              "name": "RHSA-2006:0217",
              "refsource": "REDHAT",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0217.html"
            },
            {
              "name": "1015654",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1015654"
            },
            {
              "name": "18987",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/18987"
            },
            {
              "name": "19000",
              "refsource": "SECUNIA",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/19000"
            },
            {
              "name": "SUSE-SR:2006:005",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2006_05_sr.html"
            },
            {
              "name": "19130",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19130"
            },
            {
              "name": "DSA-995",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2006/dsa-995"
            },
            {
              "name": "19226",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19226"
            },
            {
              "name": "GLSA-200603-16",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml"
            },
            {
              "name": "19304",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19304"
            },
            {
              "name": "ADV-2006-0565",
              "refsource": "VUPEN",
              "tags": [],
              "url": "http://www.vupen.com/english/advisories/2006/0565"
            },
            {
              "name": "metamail-boundary-bo(24702)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24702"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": true,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-07-20T01:30Z",
      "publishedDate": "2006-02-15T11:06Z"
    }
  }
}

RHSA-2006:0217

Vulnerability from csaf_redhat - Published: 2006-02-21 14:38 - Updated: 2025-11-21 17:30

Summary

Red Hat Security Advisory: metamail security update

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2006-0709.

CVE-2006-0709

Fixed: 4 products

https://access.redhat.com/errata/RHSA-2006:0217

Open the full advisory

RHSA-2006_0217

Vulnerability from csaf_redhat - Published: 2006-02-21 14:38 - Updated: 2024-11-22 00:10

Summary

Red Hat Security Advisory: metamail security update

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2006-0709.

CVE-2006-0709

Fixed: 4 products

https://access.redhat.com/errata/RHSA-2006:0217

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2006-0709 (GCVE-0-2006-0709)

CERTA-2006-AVI-109

Description

Solution

CERTA-2006-AVI-109

Description

Solution

FKIE_CVE-2006-0709

GHSA-C93R-P92X-RRC3

GSD-2006-0709

RHSA-2006:0217

RHSA-2006_0217

Tags

Sightings

Nomenclature

Related by attack behaviour