CVE-2006-2806: High severity Apache James vulnerability
Published Jun 5, 2006
·Updated
The SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote attackers to cause a denial of service (CPU consumption) via a long argument to the MAIL command.
Affected Software
1 affected component
Apache James=2.2.0
Event History
Jun 5, 2006
CVE Published
05:02 PM
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-2806?
The severity of CVE-2006-2806 is classified as high due to its potential for denial of service attacks.
2
How do I fix CVE-2006-2806?
To fix CVE-2006-2806, upgrade to a newer version of Apache James that is not affected by this vulnerability.
3
What type of attack does CVE-2006-2806 allow?
CVE-2006-2806 allows remote attackers to launch a denial of service attack by causing high CPU consumption.
4
Which version of Apache James is affected by CVE-2006-2806?
Apache James version 2.2.0 is the specific affected version associated with CVE-2006-2806.
5
Can CVE-2006-2806 be exploited remotely?
Yes, CVE-2006-2806 can be exploited remotely by sending a specially crafted long argument to the MAIL command.