« Volver al listado

CVE-2006-4787

Estado: ModificadaBaja (2.1)—

AlphaMail anterior a 1.0.16 permite a usuarios locales obtener información sensible mediante la funcionalidad de registro de eventos, que muestra contraseñas no cifradas en un mensaje de error. NOTA: algunos detalles se han obtenido de información de terceros.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Alphamail — Alphamail

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-4787",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-09-14T10:07:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/21871",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://whizzo.uoregon.edu/public/src/alphamail/ChangeLog",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/19996",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3592",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28907",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/21871",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://whizzo.uoregon.edu/public/src/alphamail/ChangeLog",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/19996",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/3592",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28907",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message.  NOTE: some details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "AlphaMail anterior a 1.0.16 permite a usuarios locales obtener información sensible mediante la funcionalidad de registro de eventos, que muestra contraseñas no cifradas en un mensaje de error. NOTA: algunos detalles se han obtenido de información de terceros."
    }
  ],
  "lastModified": "2026-06-16T22:29:47.787",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25B87F8E-B9DB-4606-AB7F-C53549136B19"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A70FD38-A84C-48E4-8843-DE04B6DDA517"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0D48B4F-CA37-434B-9A89-5BD574936956"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE78C33D-5BEF-4D48-8E60-C9D21565E293"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6E9EB4C-43DA-4B10-9E12-F8DCB2D83BDC"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7FD084E5-418E-4D0B-8F7E-7EB5D43EF2FF"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67DD7470-4861-4EFD-A8A3-75D1B21DD525"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0CD81998-6B35-4278-9D89-3B4838AA2159"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "713E74CA-D0E4-4A03-B461-E713A9AC7A6E"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A114BF3E-F9F6-4784-B1C2-AFA4ACFB81B4"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FAB89CB3-6FEA-4B9C-9278-EA28B70EA1A1"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "170FAB77-F67A-4FD5-BCAD-44DC10BDB080"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14DE799F-D423-46EC-BF5C-EAC563D58DE4"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BFAFB51-F1E2-4489-9AA0-4B7761130780"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24A71B93-BBA6-450C-A14A-7DBDDE1E4CF7"
            },
            {
              "criteria": "cpe:2.3:a:alphamail:alphamail:1.0.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "018A660A-94CD-4DD2-8F2F-429A514D79F7"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}