McAfee WebShield SMTP up to 4.5 MR2 Bounce Error Message format string
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
6.6 | $0-$5k | 0.00 |
A vulnerability classified as critical has been found in McAfee WebShield SMTP up to 4.5 MR2. Affected is an unknown part of the component Bounce Error Message Handler. The manipulation with an unknown input leads to a format string vulnerability. CWE is classifying the issue as CWE-134. The product uses a function that accepts a format string as an argument, but the format string originates from an external source. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:
Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed.
The bug was discovered 04/03/2006. The weakness was shared 04/04/2006 by Ollie Whitehouse with Symantec (Website). The advisory is shared for download at secunia.com. This vulnerability is traded as CVE-2006-0559 since 02/06/2006. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available.
It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $25k-$100k.
Upgrading eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at mcafee.com. The best possible mitigation is suggested to be upgrading to the latest version. Furthermore it is possible to detect and prevent this kind of attack with TippingPoint and the filter 4009.
The vulnerability is also documented in the vulnerability database at X-Force (25621).
Product
Vendor
Name
Version
License
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.3VulDB Meta Temp Score: 6.6
VulDB Base Score: 7.3
VulDB Temp Score: 6.6
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Format stringCWE: CWE-134 / CWE-119
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Proof-of-Concept
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
0-Day Time: 🔍
Patch: mcafee.com
TippingPoint: 🔍
McAfee IPS: 🔍
McAfee IPS Version: 🔍
PaloAlto IPS: 🔍
Fortigate IPS: 🔍
Timeline
02/06/2006 🔍04/03/2006 🔍
04/03/2006 🔍
04/04/2006 🔍
04/04/2006 🔍
04/04/2006 🔍
04/04/2006 🔍
04/04/2006 🔍
04/04/2006 🔍
04/04/2006 🔍
06/16/2019 🔍
Sources
Vendor: mcafee.comAdvisory: secunia.com⛔
Researcher: Ollie Whitehouse
Organization: Symantec
Status: Confirmed
CVE: CVE-2006-0559 (🔍)
X-Force: 25621 - McAfee WebShield SMTP server format string, High Risk
SecurityTracker: 1015861
Vulnerability Center: 10916 - McAfee WebShield SMTP Format String Vulnerability, High
SecurityFocus: 16742 - McAfee Webshield SMTP Remote Format String Vulnerability
Secunia: 19491 - McAfee WebShield SMTP Format String Vulnerability, Highly Critical
OSVDB: 24366 - McAfee WebShield SMTP Bounce Message Format String
Vupen: ADV-2006-1219
Entry
Created: 04/04/2006 13:27Updated: 06/16/2019 09:34
Changes: 04/04/2006 13:27 (89), 06/16/2019 09:34 (1)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.