CVE-2006-4344

MEDIO 5.0CVE-2006-4344 · Published 24/08/2006 · updated 16/06/2026

In breve

CVE-2006-4344 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda mail f w system (cgi-rescue).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
mail f w system cgi-rescue	`= 8.3`	No fix yet

Description

CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in (1) mail.cgi and (2) query.cgi.

References

jvn.jp/jp/JVN%2311048526/index.html · Patch
secunia.com/advisories/21543 · Patch
osvdb.org/28131 · Patch
rescue.ne.jp/whatsnew/blog.cgi/permalink/20060822210549 · Patch
securityfocus.com/bid/19676 · Patch
vupen.com/english/advisories/2006/3359

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free