CVE-2006-0129: Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier gener...

Security readout for executives and security teams

This flaw lets a remote party tell whether a MailSite username exists because the Mail Management Agent replies differently for valid and invalid users. It does not show direct mailbox access or code execution, but it can make phishing, password guessing, and account-targeting more effective. Exposure is likely limited to organizations still running legacy Rockliffe MailSite versions with the MAILMA service reachable on TCP 106, especially from untrusted networks. Systems without MailSite or without TCP 106 exposure are not indicated as affected by the source bundle. Treat this as a targeted-abuse risk for any remaining legacy MailSite deployment. It is not evidenced as critical, but exposed mail infrastructure with user enumeration should be prioritized for isolation, upgrade review, or retirement because it supports credential attacks. Mitigation focus: Identify any Rockliffe MailSite deployments and confirm whether versions are 7.0.3.1 or earlier.; Restrict TCP 106 access to trusted administrative networks where operationally required.; Check current vendor or maintainer guidance for fixed versions or supported migration paths..

Prepared

Jun 29, 2026, 15:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.