CVE-2006-4379 identifies a stack-based buffer overflow in the SMTP Daemon of Ipswitch Collaboration 2006 Suite, IMail, IMail Plus, and IMail Secure. This vulnerability allows unauthenticated remote attackers to execute arbitrary code by sending a long string within an email address field. Rated with a CVSS score of 7.5 (HIGH) and a FAUCET Risk Score of 86.0, it poses a significant threat due to its network attack vector and low attack complexity, potentially leading to full system compromise. Despite its age, this CVE is on the "Hot List" and has multiple public exploits available on ExploitDB, including a Metasploit module, indicating continued community attention and potential for exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2006CPE matchmatch criteria | cpe:2.3:a:ipswitch:imail_plus:2006:*:*:*:*:*:*:* | ||
2006CPE matchmatch criteria | cpe:2.3:a:ipswitch:imail_secure_server:2006:*:*:*:*:*:*:* | ||
2006_premiumCPE matchmatch criteria | cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2006_premium:*:*:*:*:*:*:* | ||
2006_standardCPE matchmatch criteria | cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2006_standard:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.