CVE-2006-6997
Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 leads to "weakened authentication security" with unknown impact and attack vectors.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.77%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 leads to "weakened authentication security" with unknown impact and attack vectors. NOTE: due to lack of details, it is not clear whether this is the same as CVE-2006-1792.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 1.77% probability · 77th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- mailenable/mailenable enterprise · mailenable/mailenable standard
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.htmlVendor Advisory
- http://www.mailenable.com/enterprisehistory.aspVendor Advisory
- http://www.mailenable.com/professionalhistory.aspVendor Advisory
- http://www.mailenable.com/standardhistory.aspVendor Advisory
- http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.htmlVendor Advisory
- http://www.mailenable.com/enterprisehistory.aspVendor Advisory
- http://www.mailenable.com/professionalhistory.aspVendor Advisory
- http://www.mailenable.com/standardhistory.aspVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.