2.6
CVSSv2

CVE-2006-2920

Published: 09/06/2006 Updated: 07/11/2023
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 231
Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Vulnerability Summary

Sylpheed-Claws prior to 2.2.2 and Sylpheed prior to 2.2.6 allow remote malicious users to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character.

Vulnerable Product Search on Vulmon Subscribe to Product

sylpheed sylpheed

sylpheed sylpheed 2.1.2

sylpheed sylpheed 2.0

sylpheed-claws sylpheed-claws 0.9.4

sylpheed-claws sylpheed-claws 0.9.5

sylpheed-claws sylpheed-claws 0.9.6

sylpheed-claws sylpheed-claws

sylpheed sylpheed 2.0.1

sylpheed sylpheed 2.0.2

sylpheed sylpheed 2.1.1

sylpheed sylpheed 2.1.3

sylpheed sylpheed 2.1.5

sylpheed sylpheed 2.1.4

sylpheed-claws sylpheed-claws 1.0.2

sylpheed sylpheed 2.0.3

sylpheed sylpheed 2.1

Vendor Advisories

Debian Bug report logs - #372889 sylpheed-claws-gtk2: CVE-2006-2920: URI bypass Package: sylpheed-claws-gtk2; Maintainer for sylpheed-claws-gtk2 is (unknown); Reported by: Alec Berryman <alec@thenednet> Date: Mon, 12 Jun 2006 12:03:17 UTC Severity: serious Tags: confirmed, fixed-upstream, patch, security Fixed in version ...