Every CVESearch/Get API key

CVE-2006-7038

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers...

7.8 High

CVE-2006-7038 is a high vulnerability (CVSS 7.8) in Atrium Software Mercur Messaging 2005, published February 23, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. No source names a fixed version.

What does this mean?
Severity
7.8 HighCVSS 2.0, NVD
Exploit chance
1.97%EPSS, 80th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) "long command lines at port 32000" and (2) certain name service queries that are not properly handled by the SMTP service.

Exploit likelihood

1.97%Up 0.8 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used7.8

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) "long command lines at port 32000" and (2) certain name service queries that are not properly handled by the SMTP service.

Record
CVE-2006-7038
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Updated
2026-11-02
CVE ListNo score

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) "long command lines at port 32000" and (2) certain name service queries that are not properly handled by the SMTP service.

Record
CVE-2006-7038
Updated
2026-11-02
EUVDEUVD-2006-7020No score

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) "long command lines at port 32000" and (2) certain name service queries that are not properly handled by the SMTP service.

Record
EUVD-2006-7020
Updated
2026-11-03
GitHub AdvisoriesGHSA-mh3j-qxmv-rf26No score

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers...

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) "long command lines at port 32000" and (2) certain name service queries that are not properly handled by the SMTP service.

Record
GHSA-mh3j-qxmv-rf26
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open