CVE-2006-3778 - CVE Reference - Advisories

CVE Reference: CVE-2006-3778

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-3778

Description: IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the (1) "Save As Draft" option is used or (2) a "," (comma) is inside the "phrase" portion of an address, which can cause the e-mail to be sent to users that were deleted from the To, CC, and BCC fields, which allows remote attackers to obtain the list of original recipients.

CVE Status: Candidate

References: ST 1016516 1016819 SAID Secunia Advisory: SA21096 CONFIRM http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21240386 http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21243602

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	HP Enterprise Discovery Unspecified Privilege Escalation

2.	IBM DB2 CLR Stored Procedures Unspecified Vulnerability

3.	DriveCrypt Plus Pack Password Disclosure Security Issue

4.	Xoops PopnupBlog Module "index.php" Cross-Site Scripting

5.	IBM Lotus Quickr Multiple Cross-Site Scripting Vulnerabilities

6.	K-Rate Premium Multiple Vulnerabilities

7.	AWStats Totals Cross-site Scripting and PHP Code Execution

8.	Red Hat update for kernel

9.	Sharity Unspecified Vulnerability

10.	Sun Solaris NFS RPC Zones Denial of Service