NVD

Id
63783  
Name
CVE-2006-5177  
Description
The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or (2) cause a denial of service via crafted base64 encoded NTLM Type 1 messages, which trigger a buffer over-read.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-10-10  
Modified Date
2011-03-07  
Seq
2006-5177  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
332456 63783 CVE-2006-5177 http://labs.musecurity.com/advisories/MU-200609-01.txt  View
332457 63783 CVE-2006-5177 http://www.mailenable.com/hotfix/  View
332458 63783 CVE-2006-5177 20290  View
332459 63783 CVE-2006-5177 ADV-2006-3862  View
332460 63783 CVE-2006-5177 mailenable-base64-ntml-message-dos(29286)  View
332461 63783 CVE-2006-5177 mailenable-base64-message-code-execution(29287)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59959 JVNDB-2006-002225 MailEnable の NTML 認証におけるコードを実行される脆弱性 MailEnable Professional および MailEnable Enterprise の NTML 認証には、(1) 任意のコードを実行される、または (2) サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2006-5177 21279 CVE-2006-5177 63783 9.3 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002225.html 2006-10-10 2012-09-25 View