CVE-2006-2107

CVE-2006-2107 describes a buffer overflow vulnerability in BL4 SMTP Server version 0.1.4 and earlier. This flaw allows unauthenticated remote attackers to trigger a denial of service or execute arbitrary code by sending excessively long arguments to the EHLO, MAIL FROM, or RCPT TO commands. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.