PT-2007-1317 · Mercury · Mercur Messaging 2005

Publicado 2007-02-23 · Atualizado 2017-07-29 · CVE-2006-7038

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MERCUR Messaging 2005 versions prior to Service Pack 4

Description The issue is related to multiple buffer overflows that can cause a denial of service, resulting in a crash. This can be triggered by remote attackers through long command lines at port 32000 or certain name service queries that are not properly handled by the SMTP service.

Recommendations For MERCUR Messaging 2005 versions prior to Service Pack 4, apply Service Pack 4 to resolve the issue. As a temporary workaround, consider restricting access to port 32000 and limiting the handling of name service queries by the SMTP service until the patch is applied.

Correção

Identificadores relacionados

CVE-2006-7038

Produtos afetados

Mercur Messaging 2005

Referências · 6

• http://vupen.com/english/advisories/2006/2354 · Nota
• http://atrium-software.com/download/McrReadMe_EN.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27231 · Nota
• http://securityfocus.com/bid/18462 · Correção
• http://secunia.com/advisories/20432 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-7038 · Nota de Segurança