{"api_version":"1","generated_at":"2026-07-23T07:49:03+00:00","cve":"CVE-2006-0130","urls":{"html":"https://cve.report/CVE-2006-0130","api":"https://cve.report/api/cve/CVE-2006-0130.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-0130","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-0130"},"summary":{"title":"CVE-2006-0130","description":"Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-01-09 11:03:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt","name":"http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"","mime":"text/plain","httpstatus":"-1","archivestatus":"200"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html","name":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"[Full-disclosure] Rockliffe Mailsite User Enumeration Flaw","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-0130","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-0130","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"130","vulnerable":"1","versionEndIncluding":"7.0.3.1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"rockliffe","cpe5":"mailsite","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:25:33.611Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt"},{"name":"20060104 Rockliffe Mailsite User Enumeration Flaw","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2006-01-09T11:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt"},{"name":"20060104 Rockliffe Mailsite User Enumeration Flaw","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-0130","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt","refsource":"MISC","url":"http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt"},{"name":"20060104 Rockliffe Mailsite User Enumeration Flaw","refsource":"FULLDISC","url":"http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-0130","datePublished":"2006-01-09T11:00:00.000Z","dateReserved":"2006-01-09T00:00:00.000Z","dateUpdated":"2024-09-17T01:06:52.684Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-01-09 11:03:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rockliffe:mailsite:*:*:*:*:*:*:*:*","versionEndIncluding":"7.0.3.1","matchCriteriaId":"1F727A82-6E93-4F6F-A771-704C9F5FFB77"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"130","Ordinal":"1","Title":"CVE-2006-0130","CVE":"CVE-2006-0130","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"130","Ordinal":"1","NoteData":"Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account.","Type":"Description","Title":"CVE-2006-0130"},{"CveYear":"2006","CveId":"130","Ordinal":"2","NoteData":"2006-01-09","Type":"Other","Title":"Published"}]}}}