Every CVE Search/ Get API key

CVE-2006-2036

iOpus Secure Email Attachments (SEA), probably 1.0, does not properly handle passwords that...

2.1 Low

iOpus Secure Email Attachments (SEA), probably 1.0, does not properly handle passwords that consist of repetitions of a substring, which allows attackers to decrypt files by entering only the substring.

Exploit likelihood

0.36%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

iOpus Secure Email Attachments (SEA), probably 1.0, does not properly handle passwords that consist of repetitions of a substring, which allows attackers to decrypt files by entering only the substring.

Record
CVE-2006-2036
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

iOpus Secure Email Attachments (SEA), probably 1.0, does not properly handle passwords that consist of repetitions of a substring, which allows attackers to decrypt files by entering only the substring.

Record
CVE-2006-2036
Updated
2026-11-02
EUVDEUVD-2006-2037 No score

iOpus Secure Email Attachments (SEA), probably 1.0, does not properly handle passwords that consist of repetitions of a substring, which allows attackers to decrypt files by entering only the substring.

Record
EUVD-2006-2037
Updated
2026-11-03
GitHub AdvisoriesGHSA-2cq9-f7wp-92xf No score

iOpus Secure Email Attachments (SEA), probably 1.0, does not properly handle passwords that...

iOpus Secure Email Attachments (SEA), probably 1.0, does not properly handle passwords that consist of repetitions of a substring, which allows attackers to decrypt files by entering only the substring.

Record
GHSA-2cq9-f7wp-92xf
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-2036 is a low vulnerability (CVSS 2.1) in Iopus Secure Email Attachments, published April 26, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 29th percentile. No source names a fixed version.

References

MoveEnter Open