CVE-2006-2806

Description

References

• advisories.echo.or.id/adv/adv31-y3dips-2006.txt · Exploit
• securityreason.com/securityalert/1038
• securityfocus.com/archive/1/435278/100/0/threaded
• securityfocus.com/bid/18138
• exchange.xforce.ibmcloud.com/vulnerabilities/26786

More vulnerabilities in james

• CVE-2023-51747HIGH 7.1Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter handling might create…
• CVE-2023-51518CRITICAL 9.8Apache James prior to version 3.7.5 and 3.8.0 exposes a JMX endpoint on localhost subject to pre-authentication deserialisation of untrusted…
• CVE-2023-26269HIGH 7.8Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This allows privilege esc…
• CVE-2022-45935MEDIUM 5.5Usage of temporary files with insecure permissions by the Apache James server allows an attacker with local access to access private user da…
• CVE-2022-45787MEDIUM 5.5Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local …