CVE-2006-5313: Input Validation
Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtpmessage parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct SMTP session. NOTE: this is a different type of issue than CVE-2006-5262.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5313?
CVE-2006-5313 is considered a medium severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2006-5313?
To fix CVE-2006-5313, upgrade to a version of Hastymail later than 1.5 or apply any available patches.
Who is affected by CVE-2006-5313?
CVE-2006-5313 affects users of Hastymail versions 1.5 and earlier.
What type of vulnerability is CVE-2006-5313?
CVE-2006-5313 is a command injection vulnerability allowing remote authenticated users to send arbitrary SMTP commands.
Can CVE-2006-5313 be exploited remotely?
Yes, CVE-2006-5313 can be exploited by remote authenticated users under certain conditions.