Vulnerabilities > CVE-2006-4344 - Email Header Injection vulnerability in Cgi-Rescue Mail F W System 8.3

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
cgi-rescue

Summary

CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in (1) mail.cgi and (2) query.cgi.

Vulnerable Configurations

Part Description Count
Application
Cgi-Rescue
1