CVE-2006-0447

CVE-2006-0447 describes multiple buffer overflow vulnerabilities in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00. These flaws allow remote attackers to execute arbitrary code by sending overly long usernames to SMTP AUTH PLAIN/LOGIN commands, APOP POP3 commands, or a long IMAP DELETE command. The vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.