« Volver al listado

CVE-2006-3552

Estado: ModificadaMedia (6.4)—

Premium Anti-Spam in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium, when using a certain .dat file in the StarEngine /data directory from 20060630 or earlier, does not properly receive and implement bullet signature updates, which allows context-dependent attackers to use the server for spam transmission.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Ipswitch — Ipswitch Collaboration SuiteIpswitch — Ipswitch Secure Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-3552",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-07-13T00:05:00.000",
  "references": [
    {
      "url": "http://ipswitch.com/support/ics/updates/security_advisory_20060630.asp",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://ipswitch.com/support/imail/releases/security_advisory_20060630.asp",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1016419",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1016420",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2653",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://ipswitch.com/support/ics/updates/security_advisory_20060630.asp",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://ipswitch.com/support/imail/releases/security_advisory_20060630.asp",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1016419",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1016420",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2653",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Premium Anti-Spam in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium, when using a certain .dat file in the StarEngine /data directory from 20060630 or earlier, does not properly receive and implement bullet signature updates, which allows context-dependent attackers to use the server for spam transmission."
    },
    {
      "lang": "es",
      "value": "Premium Anti-Spam en Ipswitch IMail Secure Server 2006 y Collaboration Suite 2006 Premium, cuando utiliza un cierto archivo .dat en el directorio StarEngine /data desde 20060630 o anteriores, no recibe de forma adecuada e implemente un botón de actualización de firma, la cual permite a atacantes dependientes del contexto utilizar el servidos para hacer envíos de spam."
    }
  ],
  "lastModified": "2026-06-16T22:27:17.707",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2006_premium:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4031612D-7151-45DF-9AF6-7DEA14FA13B7"
            },
            {
              "criteria": "cpe:2.3:a:ipswitch:ipswitch_secure_server:2006_premium:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "827553B6-5D12-4D0B-A907-B1208A08D8FF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}