CVE-2006-0559

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-04-04 · updated 2026-06-16

Description

Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed.

Affected products

McAfee Webshield Smtp: through 4.5

References

http://secunia.com/advisories/19491
http://securityreason.com/securityalert/671
http://securitytracker.com/id?1015861
http://www.osvdb.org/24366
http://www.securityfocus.com/archive/1/429812/100/0/threaded
http://www.securityfocus.com/bid/16742
http://www.vupen.com/english/advisories/2006/1219
https://exchange.xforce.ibmcloud.com/vulnerabilities/25621
http://secunia.com/advisories/19491
http://securityreason.com/securityalert/671
http://securitytracker.com/id?1015861
http://www.osvdb.org/24366

Get alerted when CVE-2006-0559 or the next vulnerability affects your stack