CVE-2006-6997: Critical severity mailenable enterprise vulnerability

Published Feb 12, 2007

Updated

Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 leads to "weakened authentication security" with unknown impact and attack vectors. NOTE: due to lack of details, it is not clear whether this is the same as CVE-2006-1792.

Affected Software

14 affected components

MailEnable MailEnable Enterprise=1.1

MailEnable MailEnable Enterprise=1.04

MailEnable MailEnable Standard=1.71

MailEnable MailEnable Standard=1.701

MailEnable MailEnable Enterprise=1.0

MailEnable MailEnable Enterprise=1.02

MailEnable MailEnable Standard=1.703

MailEnable MailEnable Standard=1.704

MailEnable MailEnable Standard=1.702

MailEnable MailEnable Enterprise=1.01

MailEnable MailEnable Enterprise=1.00

MailEnable MailEnable Enterprise=1.03

MailEnable MailEnable Standard=1.72

MailEnable MailEnable Enterprise=1.2

Event History

Feb 12, 2007

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-6997?

CVE-2006-6997 is classified as an unspecified vulnerability which may lead to weakened authentication security.

How do I fix CVE-2006-6997?

To fix CVE-2006-6997, upgrade MailEnable to the latest versions as outlined in the corresponding release notes.

Which versions of MailEnable are affected by CVE-2006-6997?

CVE-2006-6997 affects MailEnable Standard Edition versions before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21.

What are the potential impacts of CVE-2006-6997?

The potential impacts of CVE-2006-6997 include undetermined attack vectors that may compromise authentication security.

Is there a workaround for CVE-2006-6997?

Currently, there are no widely suggested workarounds for CVE-2006-6997 other than applying the relevant software updates.