CVE-2017-6506
CriticalSummary
In version 2.2.16 of Azure Data Expert Ultimate, there is a buffer overflow vulnerability in the SMTP verification function, which can lead to remote code execution. An attacker can exploit this by using a crafted SMTP daemon that sends a long 220 string.
Risk Assessment
This vulnerability could allow attackers to execute code remotely, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update to the latest version of the software to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code execution. The attack vector is a crafted SMTP daemon that sends a long 220 (aka "Service ready") string.