PT-2006-1628 · Stalker · Communigate Pro Server

Evgeny Legerov · Publicado 2006-02-06 · Atualizado 2018-10-19 · CVE-2006-0566

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions CommuniGate Pro Server versions prior to 5.0.8

Description The issue is caused by an error in the LDAP component during handling of LDAP requests containing a large number of elements in the DN (Distinguished Names) field. This can be exploited to crash the service via a specially-crafted LDAP request.

Recommendations For CommuniGate Pro Server versions prior to 5.0.8, update to version 5.0.8 or later to resolve the issue. As a temporary workaround, consider restricting the size of the DN field in LDAP requests to prevent the service from crashing.

Correção

Identificadores relacionados

CVE-2006-0566

Produtos afetados

Communigate Pro Server

Referências · 11

• https://exchange.xforce.ibmcloud.com/vulnerabilities/24409 · Nota
• https://cxsecurity.com/issue/WLB-2006020026 · Nota
• http://gleg.net/advisory_cg2.shtml · Nota
• http://securityreason.com/securityalert/416 · Nota
• http://vupen.com/english/advisories/2006/0444 · Nota
• http://secunia.com/advisories/18701 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-0566 · Nota de Segurança
• http://securitytracker.com/id?1015587 · Nota
• http://securityfocus.com/archive/1/423968/100/0/threaded · Nota
• http://osvdb.org/22932 · Nota
• http://stalker.com/CommuniGatePro/History.html · Nota