ID CVE-2009-4479
Summary LDAP3A.exe in MailSite 8.0.4 allows remote attackers to cause a denial of service (heap memory corruption and daemon crash) via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.13 through 8.11. NOTE: as of 20091229, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
References
Vulnerable Configurations
  • cpe:2.3:a:mailsite:mailsite:8.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:mailsite:mailsite:8.0.4:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 04-01-2010 - 05:00)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 36240
misc http://intevydis.com/vd-list.shtml
secunia 36573
Last major update 04-01-2010 - 05:00
Published 30-12-2009 - 21:30
Last modified 04-01-2010 - 05:00
Back to Top