CVEvulnerability
CVE-2006-6997
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-02-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 leads to "weakened authentication security" with unknown impact and attack vectors. NOTE: due to lack of details, it is not clear whether this is the same as CVE-2006-1792.
Affected configurations
• mailenable mailenable enterprise 1.0
• mailenable mailenable enterprise 1.00
• mailenable mailenable enterprise 1.1
• mailenable mailenable enterprise 1.01
• mailenable mailenable enterprise 1.02
• mailenable mailenable enterprise 1.2
• mailenable mailenable enterprise 1.03
• mailenable mailenable enterprise 1.04
• mailenable mailenable standard 1.71
• mailenable mailenable standard 1.72
• mailenable mailenable standard 1.701
• mailenable mailenable standard 1.702
• mailenable mailenable standard 1.703
• mailenable mailenable standard 1.704
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html Vendor Advisory
- http://www.mailenable.com/enterprisehistory.asp Vendor Advisory
- http://www.mailenable.com/professionalhistory.asp Vendor Advisory
- http://www.mailenable.com/standardhistory.asp Vendor Advisory
- http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html Vendor Advisory
- http://www.mailenable.com/enterprisehistory.asp Vendor Advisory
- http://www.mailenable.com/professionalhistory.asp Vendor Advisory
- http://www.mailenable.com/standardhistory.asp Vendor Advisory