Back to Database
Status published
Low
CVE-2006-2920
Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers...
Vulnerability Description
Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2920
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.vupen.com/english/advisories/2006/2283
- http://secunia.com/advisories/20577
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27089
- http://sourceforge.net/project/shownotes.php?release_id=422662&group_id=25528
- http://www.vupen.com/english/advisories/2006/2173
- http://secunia.com/advisories/20476
- http://sylpheed.good-day.net/en/news.html%5C
More from sylpheed
View All →CVE-2007-2958
Format string vulnerability in the inc_put_error function in src/inc.c in...
Medium
6.8
CVE-2007-1267
Sylpheed 2.2.7 and earlier does not properly use the --status-fd...
Medium
5
CVE-2005-3354
Stack-based buffer overflow in the ldif_get_line function in ldif.c of...
Medium
5.1
CVE-2005-0926
Buffer overflow in Sylpheed before 1.0.4 allows remote attackers to...
Medium
5.1
CVE-2005-0667
Buffer overflow in Sylpheed before 1.0.3 and other versions before...
Medium
5.1
Affected Vendor
sylpheed
View all reports →Affected Software
sylpheed, sylpheed-claws
Vulnerable Versions:
0, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 0.9.4, 0.9.5, 0.9.6, 1.0.2
Timeline
Official Publish:
June 9th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.