CVE-2006-6997 Weak cryptography in n/a

Critical 10.0 Published 12 Feb 2007 Updated 17 Sep 2024

Weak cryptography in MailEnable mail server allows attackers to bypass authentication security mechanisms.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Over the internet
Victim action needed: Not stated
Fix: None listed

What is CVE-2006-6997?

CVE-2006-6997 is a critical vulnerability in n/a, published on 12 Feb 2007. It can be exploited over the network.

Official description

Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 leads to "weakened authentication security" with unknown impact and attack vectors. NOTE: due to lack of details, it is not clear whether this is the same as CVE-2006-1792.

Weakness: CWE-287

Which versions are affected by CVE-2006-6997?

It affects 2 products.

Products include Mailenable Mailenable Enterprise, Mailenable Mailenable Standard.

How do I fix CVE-2006-6997?

No fix has been published for CVE-2006-6997 yet. Limit exposure of the affected software until one is available.

Is CVE-2006-6997 being exploited?

There is no known exploitation of CVE-2006-6997 in the wild and no public exploit code.

Sources

Also known as GHSA-vr3m-9j68-v7pq.