Vulnerabilities > CVE-2006-0631 - Remote Security vulnerability in Mailback

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
erik-c-thauvin
NVD
Published: 2006-02-10
Updated: 2017-07-20

Summary

CRLF injection vulnerability in mailback.pl in Erik C. Thauvin mailback allows remote attackers to use mailback as a "spam proxy" by modifying mail headers, including recipient e-mail addresses, via newline characters in the Subject field.

Vulnerable Configurations

Part Description Count
Application
Erik_C._Thauvin
1

References