CVE-2006-1792: Critical severity mailenable enterprise vulnerability

Published Apr 15, 2006

Updated

Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probably a different vulnerability than CVE-2006-1337.

Affected Software

34 affected components

MailEnable MailEnable Enterprise=1.1

MailEnable MailEnable Standard=1.93

MailEnable MailEnable Professional=1.52

MailEnable MailEnable Enterprise=1.04

MailEnable MailEnable Professional=1.17

MailEnable MailEnable Standard=1.71

MailEnable MailEnable Professional=1.18

MailEnable MailEnable Professional=1.7

MailEnable MailEnable Professional=1.71

MailEnable MailEnable Standard=1.701

MailEnable MailEnable Professional=1.5

MailEnable MailEnable Professional=1.72

MailEnable MailEnable Enterprise=1.02

MailEnable MailEnable Standard=1.703

MailEnable MailEnable Standard=1.91

MailEnable MailEnable Standard=1.704

MailEnable MailEnable Standard=1.92

MailEnable MailEnable Professional=1.19

MailEnable MailEnable Enterprise=1.21

MailEnable MailEnable Standard=1.702

MailEnable MailEnable Enterprise=1.01

MailEnable MailEnable Professional=1.2a

MailEnable MailEnable Professional=1.51

MailEnable MailEnable Standard=1.9

MailEnable MailEnable Professional=1.54

MailEnable MailEnable Professional=1.2

MailEnable MailEnable Enterprise=1.00

MailEnable MailEnable Professional=1.53

MailEnable MailEnable Enterprise=1.03

MailEnable MailEnable Standard=1.8

MailEnable MailEnable Standard=1.72

MailEnable MailEnable Professional=1.6

MailEnable MailEnable Enterprise=1.2

MailEnable MailEnable Professional=1.73

Event History

Apr 15, 2006

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1792?

The severity of CVE-2006-1792 is not explicitly defined, but it is related to unspecified authentication exploits in the MailEnable service.

How do I fix CVE-2006-1792?

To fix CVE-2006-1792, you should update MailEnable to at least version 1.94 for Standard Edition, 1.74 for Professional Edition, or 1.22 for Enterprise Edition.

Which versions of MailEnable are affected by CVE-2006-1792?

CVE-2006-1792 affects MailEnable Standard Edition versions before 1.94, Professional Edition versions before 1.74, and Enterprise Edition versions before 1.22.

What kind of exploitation can CVE-2006-1792 lead to?

CVE-2006-1792 can lead to authentication exploits, potentially allowing unauthorized access to the MailEnable service.

Is there a known workaround for CVE-2006-1792?

There is no specific workaround for CVE-2006-1792; updating to a patched version is the recommended solution.