ID CVE-2007-3959
Summary The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.
References
Vulnerable Configurations
  • cpe:2.3:a:ipswitch:imserver:2.0.5.30:*:*:*:*:*:*:*
    cpe:2.3:a:ipswitch:imserver:2.0.5.30:*:*:*:*:*:*:*
  • cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.01:*:*:*:*:*:*:*
    cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.01:*:*:*:*:*:*:*
  • cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.07:*:*:*:*:*:*:*
    cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.07:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 08-03-2011 - 02:57)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 25031
confirm http://www.ipswitch.com/support/instant_messaging/patch-upgrades.asp
idefense 20070723 Ipswitch Instant Messaging Server Denial of Service Vulnerability
sectrack 1018440
secunia 26154
vupen ADV-2007-2621
Last major update 08-03-2011 - 02:57
Published 24-07-2007 - 18:30
Last modified 08-03-2011 - 02:57
Back to Top