CVEvulnerability

CVE-2006-2659

7.8 HIGH Published 2006-05-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-05-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C

Description

libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.

Affected configurations

• double precision incorporated courier mta (<= 0.44.2) • double precision incorporated courier mta 0.37.3 • double precision incorporated courier mta 0.38.1 • double precision incorporated courier mta 0.40 • double precision incorporated courier mta 0.43 • double precision incorporated courier mta 0.43.1 • double precision incorporated courier mta 0.43.2 • double precision incorporated courier mta 0.44

References