CVE-2006-1044 json
Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface enabled, allow remote…
published 2006-03-07 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-1048
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 7.5%
- EPSS 7.5% chance of exploitation in 30 days, percentile 94%
- public exploits
- 0
- none known
Summary
Multiple buffer overflows in LISTSERV 14.3 and 14.4, including LISTSERV Lite and HPO, with the web archive interface enabled, allow remote attackers to execute arbitrary code via unknown attack vectors related to the WA CGI. NOTE: technical details will be released after the grace period has ended on 20060603.
Patch / fix
Exploit prediction
7.47% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
lsoft.com
/manuals/1.8e/relnotes/LISTSERV14.5-Release-Notes.html#wasecurityalert
patch
-
securitytracker.com
/id?1015722
vdb-entry, patch, vendor-advisory
-
securityfocus.com
/bid/16951
vdb-entry, patch
-
exchange.xforce.ibmcloud.com
/vulnerabilities/25168
vdb-entry
-
kb.cert.org
/vuls/id/841132
third-party-advisory, us-government-resource
-
securityfocus.com
/archive/1/426770/100/0/threaded
mailing-list
-
secunia.com
/advisories/19106
third-party-advisory
- ngssoftware.com /advisories/listserv_3.txt
-
vupen.com
/english/advisories/2006/0824
vdb-entry
Sources
- CVE List CVE-2006-1044
- NVD CVE-2006-1044
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.