CVE-2006-5177 describes critical vulnerabilities in MailEnable Professional 2.0 and Enterprise 2.0, specifically within their NTLM authentication mechanism. Remote attackers can exploit crafted base64 encoded NTLM Type 3 messages to execute arbitrary code or use Type 1 messages to trigger a buffer over-read, leading to a denial of service. With a CVSS score of 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C) and a FAUCET Risk Score of 94/100, this vulnerability is highly severe, allowing for complete compromise or service disruption with medium attack complexity. While not listed in CISA's KEV catalog and lacking Metasploit/Nuclei modules, an ExploitDB entry (EDB-28735) confirms exploit code availability, though there is no evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.0CPE matchmatch criteria | cpe:2.3:a:mailenable:mailenable_enterprise:2.0:*:*:*:*:*:*:* | ||
2.0CPE matchmatch criteria | cpe:2.3:a:mailenable:mailenable_professional:2.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.