CVE-2006-5177

no score yetEPSS 7.1%

The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or (2) cause a denial of service via crafted base64 encoded NTLM Type 1 messages, which trigger a buffer over-read.

EPSS: 7.1% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2006-10-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mailenable:mailenable_enterprise
mailenable:mailenable_professional

References

http://labs.musecurity.com/advisories/MU-200609-01.txt
http://secunia.com/advisories/22179
http://www.mailenable.com/hotfix/
http://www.securityfocus.com/bid/20290
http://www.vupen.com/english/advisories/2006/3862

Check your stack JSON