CVE-2006-2659
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU...
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.
Exploit likelihood
What each source reports
NVD Score used
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.
- Record
CVE-2006-2659- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.
- Record
CVE-2006-2659- Updated
- 2026-11-02
EUVDEUVD-2006-2658 No score
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.
- Record
EUVD-2006-2658- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jf3h-hc4x-5q33 No score
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU...
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.
- Record
GHSA-jf3h-hc4x-5q33- Updated
- 2026-11-02
OSV No score
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.
- Record
CVE-2006-2659- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-2659 No score
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.
- Record
DEBIAN-CVE-2006-2659- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
courierDebian:12 |
before 0.53.2-1 | 0.53.2-1 |
courierDebian:13 |
before 0.53.2-1 | 0.53.2-1 |
courierDebian:14 |
before 0.53.2-1 | 0.53.2-1 |
courierDebian:3.0 |
before 0.37.3-2.9, plus listed versions 0.37.3-2.50.37.3-2.60.37.3-2.70.37.3-2.8 |
0.37.3-2.9 |
courierDebian:3.1 |
before 0.47-4sarge5, plus listed versions 0.47-40.47-4sarge10.47-4sarge20.47-4sarge30.47-4sarge4 |
0.47-4sarge5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2659 is a high vulnerability (CVSS 7.8) in Double Precision Incorporated Courier Mta, published May 30, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.40%, the 84th percentile. Fixed in courier 0.53.2-1.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=368834
exchange.xforce.ibmcloud.com/vulnerabilities/26998
security.gentoo.org/glsa/glsa-200608-06.xml
securityfocus.com/bid/18345
secunia.com/advisories/20548
Show 10 moreShow less
courier-mta.org/beta/patches/verp-fix/README.txt
debian.org/security/2006/dsa-1101
vupen.com/english/advisories/2006/2214
usn.ubuntu.com/294-1
securitytracker.com/id?1016248
nvd.nist.gov/vuln/detail/CVE-2006-2659
github.com/advisories/GHSA-jf3h-hc4x-5q33
security-tracker.debian.org/tracker/CVE-2006-2659