PT-2006-1534 · Communigate · Communigate Pro Server

Publicado 2006-01-30 · Atualizado 2018-10-19 · CVE-2006-0468

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CommuniGate Pro Server versions 5.0.6 and prior

Description The issue is caused by errors in the LDAP component during handling of negative length values in the Basic Encoding Rules (BER) length fields. This can be exploited to cause a denial of service and may allow arbitrary code execution via a specially-crafted LDAP request. A remote attacker can send a specially formed LDAP packet to cause the denial of service or execute arbitrary code on the target system.

Recommendations For CommuniGate Pro Server versions 5.0.6 and prior, update to version 5.0.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the LDAP component until a patch is available. Avoid using the LDAP component with untrusted input until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-0468

Produtos afetados

Communigate Pro Server

Referências · 14

• 🔥 https://exploit-db.com/exploits/27144 · Exploit
• http://securitylab.ru/vulnerability/261793.php · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24409 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0468 · Nota de Segurança
• http://securityfocus.com/archive/1/423364/100/0/threaded · Nota
• http://secunia.com/advisories/18640 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/0364 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041863.html · Nota
• http://securityfocus.com/bid/16407 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0468 · Nota
• http://gleg.net/advisory_cg.shtml · Aviso do Fabricante
• http://mail.communigate.com/Lists/CGatePro/Message/82832.html · Nota
• http://securityfocus.com/archive/1/423364 · Nota
• http://stalker.com/CommuniGatePro/History.html · Nota