PT-2007-2961 · Atrium · Atrium Mercur Imapd

Mu-B · Publicado 2007-03-21 · Atualizado 2017-10-11 · CVE-2007-1578

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Atrium MERCUR IMAPD version 5.00.14 with SP4

Description The issue is related to multiple integer signedness errors in the NTLM implementation, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending a long NTLMSSP argument that triggers a stack-based buffer overflow.

Recommendations For Atrium MERCUR IMAPD version 5.00.14 with SP4, consider disabling the NTLM implementation until a patch is available to prevent exploitation of the integer signedness errors. Restrict access to the NTLMSSP argument to minimize the risk of triggering a stack-based buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-1578

Produtos afetados

Atrium Mercur Imapd

Referências · 10

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0280.html · Exploit
• 🔥 http://securityfocus.com/bid/23058 · Exploit
• 🔥 http://digit-labs.org/files/exploits/mercur-v1.pl · Exploit
• 🔥 http://securitytracker.com/id?1017798 · Exploit
• 🔥 https://exploit-db.com/exploits/3527 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33120 · Nota
• http://vupen.com/english/advisories/2007/1053 · Nota
• http://osvdb.org/33545 · Nota
• http://secunia.com/advisories/24596 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-1578 · Nota de Segurança