CVE-2006-1792 Auth bypass in n/a

Critical 10.0 Published 15 Apr 2006 Updated 17 Sep 2024

An unspecified authentication vulnerability in MailEnable POP service allows attackers to bypass security controls, requiring an upgrade to patched versions.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2006-1792?

CVE-2006-1792 is a critical authentication bypass vulnerability in n/a, published on 15 Apr 2006. It can be exploited over the network.

Official description

Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probably a different vulnerability than CVE-2006-1337.

Which versions are affected by CVE-2006-1792?

It affects 3 products.

Products include Mailenable Mailenable Enterprise, Mailenable Mailenable Professional, Mailenable Mailenable Standard.

How do I fix CVE-2006-1792?

No fix has been published for CVE-2006-1792 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2006-1792 being exploited?

There is no known exploitation of CVE-2006-1792 in the wild and no public exploit code.

Sources

Also known as GHSA-5pmj-72xm-9qmf.