NVD

Id
62446  
Name
CVE-2006-3778  
Description
IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) "Save As Draft" option is used or (2) a "," (comma) is inside the "phrase" portion of an address, which can cause the e-mail to be sent to users that were deleted from the To, CC, and BCC fields, which allows remote attackers to obtain the list of original recipients.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-07-24  
Modified Date
2008-09-05  
Seq
2006-3778  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
324029 62446 CVE-2006-3778 1016516  View
324030 62446 CVE-2006-3778 1016819  View
324031 62446 CVE-2006-3778 http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21243602  View
324032 62446 CVE-2006-3778 http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21240386  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58214 JVNDB-2006-000410 IBM Lotus Notes におけるメール受信者情報漏洩の脆弱性 IBM Lotus Notes において、メールテンプレート のアクションボタン及びフォームを利用する場合、編集時に削除した受信者のメール宛て先が表示される、もしくは意図しない宛先にメールが送信される脆弱性が存在します。 CVE-2006-3778 19880 CVE-2006-3778 62446 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000410.html 2006-07-17 2007-04-01 View