CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Input Validation
Summary: hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary smtp commands by placing them after a crlf.crlf sequence in the smtp_message parameter.  note: this crosses privilege boundaries if the smtp server configuration prevents a user from establishing a direct smtp session.  note: this is a different type of issue than cve-2006-5262. this vulnerability is addressed in the following product update:
hastymail, hastymail, 1.5 (patch 2006-10-08)
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2006-10-17
Last Modified Date: 2018-10-17