Published: 30/05/2006 Updated: 03/10/2018

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 820

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Subscribe to Double Precision Incorporated

libs/comverp.c in Courier MTA prior to 0.53.2 allows malicious users to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.

Vulnerable Product	Search on Vulmon	Subscribe to Product
double precision incorporated courier mta 0.43.2
double precision incorporated courier mta 0.44
double precision incorporated courier mta 0.43
double precision incorporated courier mta 0.43.1
double precision incorporated courier mta 0.37.3
double precision incorporated courier mta
double precision incorporated courier mta 0.38.1
double precision incorporated courier mta 0.40

Debian Bug report logs - #368834 Spinning processes Package: courier-mta; Maintainer for courier-mta is Markus Wanner <markus@bluegapch>; Source for courier-mta is src:courier (PTS, buildd, popcon) Reported by: Stefan Hornburg <racke@linuxiade> Date: Thu, 25 May 2006 09:18:02 UTC Severity: normal Tags: fixed-upstr ...

A Denial of Service vulnerability has been found in the function for encoding email addresses Addresses containing a ‘=’ before the ‘@’ character caused the Courier to hang in an endless loop, rendering the service unusable ...

A bug has been discovered in the Courier Mail Server that can result in a number of processes to consume arbitrary amounts of CPU power For the old stable distribution (woody) this problem has been fixed in version 0373-29 For the stable distribution (sarge) this problem has been fixed in version 047-4sarge5 For the unstable distribution (si ...

NVD-CWE-Other http://www.courier-mta.org/beta/patches/verp-fix/README.txt http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368834 http://secunia.com/advisories/20519 http://www.securityfocus.com/bid/18345 http://securitytracker.com/id?1016248 http://secunia.com/advisories/20548 http://www.debian.org/security/2006/dsa-1101 http://secunia.com/advisories/20792 http://security.gentoo.org/glsa/glsa-200608-06.xml http://secunia.com/advisories/21350 http://www.vupen.com/english/advisories/2006/2214 https://exchange.xforce.ibmcloud.com/vulnerabilities/26998 https://usn.ubuntu.com/294-1/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368834 https://usn.ubuntu.com/294-1/https://nvd.nist.gov

CVE-2006-2659

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect