← Vulnerability feed

Vulnerability record · CVE-2006-2659 · published 30 May 2006

CVE-2006-2659: Double precision incorporated courier mta vulnerability

DDouble Precision Incorporated · Courier Mta

libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.

7.8 CVSS 2.0 High EPSS 2.4% · top 16.6%
7.8CVSS 2.0 base score
2.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
26References
16 Jun 2026Last modified by NVD

Description

libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368834 Patch
http://secunia.com/advisories/20519
http://secunia.com/advisories/20548
http://secunia.com/advisories/20792
http://secunia.com/advisories/21350
http://security.gentoo.org/glsa/glsa-200608-06.xml
http://securitytracker.com/id?1016248
http://www.courier-mta.org/beta/patches/verp-fix/README.txt Patch
http://www.debian.org/security/2006/dsa-1101
http://www.securityfocus.com/bid/18345
http://www.vupen.com/english/advisories/2006/2214
https://exchange.xforce.ibmcloud.com/vulnerabilities/26998
https://usn.ubuntu.com/294-1/
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368834 Patch
http://secunia.com/advisories/20519
http://secunia.com/advisories/20548
http://secunia.com/advisories/20792
http://secunia.com/advisories/21350
http://security.gentoo.org/glsa/glsa-200608-06.xml
http://securitytracker.com/id?1016248
http://www.courier-mta.org/beta/patches/verp-fix/README.txt Patch
http://www.debian.org/security/2006/dsa-1101
http://www.securityfocus.com/bid/18345
http://www.vupen.com/english/advisories/2006/2214
https://exchange.xforce.ibmcloud.com/vulnerabilities/26998
https://usn.ubuntu.com/294-1/

Track CVE-2006-2659 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2004-0224Double precision incorporated courier mta vulnerabilityMultiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may all…EPSS 3.3%7.5CVE-2003-0040Double precision incorporated courier mta vulnerabilitySQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.EPSS 1.2%5.0CVE-2002-0914Double precision incorporated courier mta vulnerabilityDouble Precision Courier e-mail MTA allows remote attackers to cause a denial of service (CPU consumption) via a message with an extremely large or n…EPSS 1.7%4.6CVE-2002-1311Double precision incorporated courier mta vulnerabilityCourier sqwebmail before 0.40.0 does not quickly drop privileges after startup in certain cases, which could allow local users to read arbitrary file…EPSS 0.34%

Source: NIST National Vulnerability Database (record CVE-2006-2659), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.