CVE-2006-2659
Fixed in a distro release EPSS 2%
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.
Products: double_precision_incorporated courier_mta
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | courier | 0.53.2-1 |
| Debian 13 | courier | 0.53.2-1 |
| Debian 14 | courier | 0.53.2-1 |
| Debian 3.0 | courier | 0.37.3-2.9 |
| Debian 3.1 | courier | 0.47-4sarge5 |