CVE-2006-3778

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-07-24 · updated 2026-06-16

Description

IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) "Save As Draft" option is used or (2) a "," (comma) is inside the "phrase" portion of an address, which can cause the e-mail to be sent to users that were deleted from the To, CC, and BCC fields, which allows remote attackers to obtain the list of original recipients.

Affected products

IBM Lotus Notes: 6.0, 6.5, 7.0

References

http://secunia.com/advisories/21096
http://securitytracker.com/id?1016516
http://securitytracker.com/id?1016819
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21243602
http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21240386
http://secunia.com/advisories/21096
http://securitytracker.com/id?1016516
http://securitytracker.com/id?1016819
http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21243602
http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21240386

Get alerted when CVE-2006-3778 or the next vulnerability affects your stack