CVE-2006-0449: Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote...

Security readout for executives and security teams

This is an old denial-of-service issue in the IMAP service of E-Post Mail 4.05 and SPA-PRO Mail 4.05. A remote attacker could interrupt a mail upload in a way that makes the service enter an infinite loop, potentially disrupting email access. Exposure is likely limited to organizations still running E-Post Mail 4.05 or SPA-PRO Mail 4.05 with IMAP reachable by users or the internet. These are legacy products, so modern environments are unlikely affected unless old mail infrastructure remains in service. Prioritize if these legacy mail products are still operational, especially if IMAP is internet-facing. The main business risk is email service disruption, not confirmed compromise. If the products are not present, this CVE should be closed as not applicable. Mitigation focus: Identify and retire any E-Post Mail 4.05 or SPA-PRO Mail 4.05 servers.; Check vendor or archived advisory guidance for fixed versions; none is named in the bundle.; Restrict IMAP access to trusted networks or VPN users where business allows..

Prepared

Jun 29, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.