Back to Database
Status published
Medium
CVE-2006-4616
SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014...
Vulnerability Description
SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 (20060904) allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-4616
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.vupen.com/english/advisories/2006/3669
- http://securitytracker.com/id?1016792
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28910
- http://www.mailenable.com/hotfix/
- http://www.securityfocus.com/bid/20091
- http://www.mailenable.com/hotfix/MESMTPC.ZIP
- http://secunia.com/advisories/21998
More from mailenable
View All →CVE-2022-42136
Authenticated mail users, under specific circumstances, could add files with...
Unknown
0
CVE-2019-12927
MailEnable Enterprise Premium 10.23 was vulnerable to stored and reflected...
Medium
6.1
CVE-2019-12926
MailEnable Enterprise Premium 10.23 did not use appropriate access control...
High
8.8
CVE-2019-12925
MailEnable Enterprise Premium 10.23 was vulnerable to multiple directory traversal...
High
8.1
CVE-2019-12924
MailEnable Enterprise Premium 10.23 was vulnerable to XML External Entity...
Critical
9.8
Affected Vendor
mailenable
View all reports →Affected Software
mailenable enterprise, mailenable professional, mailenable standard
Vulnerable Versions:
Unknown
Timeline
Official Publish:
September 7th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.