exploitDog

CVE-2006-0559

Опубликовано: 04 апр. 2006

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mcafee:webshield_smtp:*:mr2_patch:*:*:*:*:*:*

Версия до 4.5 (включая)

EPSS

Процентиль: 95%

0.19529

Средний

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-qm5x-8jpf-99pq

github

почти 4 года назад

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed.

EPSS

Процентиль: 95%

0.19529

Средний

10 Critical

CVSS2

Дефекты

NVD-CWE-Other