Vulnerabilities > CVE-2006-2806 - Denial Of Service vulnerability in Apache James 2.2.0

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
network
low complexity
apache

Summary

The SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote attackers to cause a denial of service (CPU consumption) via a long argument to the MAIL command. "James" is an acronym for the product Java Mail Enterprise Server.

Vulnerable Configurations

Part Description Count
Application
Apache
1