CVE-2006-0559

Description

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/25621

http://www.vupen.com/english/advisories/2006/1219

http://www.securityfocus.com/bid/16742

http://www.securityfocus.com/archive/1/429812/100/0/threaded

http://www.osvdb.org/24366

http://securitytracker.com/id?1015861

http://securityreason.com/securityalert/671

http://secunia.com/advisories/19491

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3