CVEvulnerability
CVE-2006-4344
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-08-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in (1) mail.cgi and (2) query.cgi.
Affected configurations
• cgi-rescue mail f w system 8.3
References
- http://jvn.jp/jp/JVN%2311048526/index.html Patch
- http://secunia.com/advisories/21543 Patch, Vendor Advisory
- http://www.osvdb.org/28131 Patch
- http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060822210549 Patch
- http://www.securityfocus.com/bid/19676 Patch
- http://www.vupen.com/english/advisories/2006/3359 www.vupen.com
- http://jvn.jp/jp/JVN%2311048526/index.html Patch
- http://secunia.com/advisories/21543 Patch, Vendor Advisory
- http://www.osvdb.org/28131 Patch
- http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060822210549 Patch
- http://www.securityfocus.com/bid/19676 Patch
- http://www.vupen.com/english/advisories/2006/3359 www.vupen.com