Unrated severityNVD Advisory· Published May 12, 2006· Updated Jun 16, 2026

CVE-2006-2346

Description

vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set by using a blank password to (1) SMTP AUTH or (2) APOP.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Double Precision Incorporated/Vpopmail \(vchkpw\)2 versions
cpe:2.3:a:inter7:vpopmail_\(vchkpw\):5.4.14:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:inter7:vpopmail_\(vchkpw\):5.4.14:*:*:*:*:*:*:*
- cpe:2.3:a:inter7:vpopmail_\(vchkpw\):5.4.15:*:*:*:*:*:*:*
vpopmail/vpopmailllm-fuzzy
Range: 5.4.14, 5.4.15

Patches

Vulnerability mechanics

References

secunia.com/advisories/19987nvdPatchVendor Advisory
sourceforge.net/project/shownotes.phpnvdPatch
www.securityfocus.com/bid/17894nvdPatch
www.osvdb.org/25445nvd
www.vupen.com/english/advisories/2006/1698nvd
exchange.xforce.ibmcloud.com/vulnerabilities/26333nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000