CVE-2006-0631: Erik C. Thauvin Mailback

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

CRLF injection vulnerability in mailback.pl in Erik C. Thauvin mailback allows remote attackers to use mailback as a "spam proxy" by modifying mail headers, including recipient e-mail addresses, via newline characters in the Subject field.

Affected products

• Erik C. Thauvin Mailback: any version

Published 2006-02-10. Last modified 2026-06-16.