low2.6
CVE-2006-2920
Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing atta…
Impact
Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sylpheed | Sylpheed | through 2.2.5 Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.1 |
| Sylpheed-Claws | Sylpheed-Claws | through 2.2.1 Versions 0.9.4, 0.9.5, 0.9.6, 1.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20476
- http://secunia.com/advisories/20577
- http://sourceforge.net/project/shownotes.php?release_id=422662&group_id=25528
- http://sylpheed.good-day.net/en/news.html%5C
- http://www.vupen.com/english/advisories/2006/2173
- http://www.vupen.com/english/advisories/2006/2283
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27089
- http://secunia.com/advisories/20476
- http://secunia.com/advisories/20577
- http://sourceforge.net/project/shownotes.php?release_id=422662&group_id=25528
- http://sylpheed.good-day.net/en/news.html%5C
- http://www.vupen.com/english/advisories/2006/2173
- http://www.vupen.com/english/advisories/2006/2283
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27089