PT-2007-5179 · Ipswitch · Ipswitch Instant Messaging+1

Publicado 2007-07-24 · Atualizado 2011-03-08 · CVE-2007-3959

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Ipswitch Instant Messaging versions 2.0.5.30 and earlier Ipswitch Collaboration Suite (ICS) versions prior to 2.07

Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending certain data to TCP port 5179. This can be achieved through the DoAttachVideoSender, DoAttachAudioSender, DoAttachVideoReceiver, and DoAttachAudioReceiver functions, which can overwrite a destructor.

Recommendations: For Ipswitch Instant Messaging versions 2.0.5.30 and earlier, update to Ipswitch Collaboration Suite (ICS) version 2.07 or later. For Ipswitch Collaboration Suite (ICS) versions prior to 2.07, update to version 2.07 or later.

Correção

Identificadores relacionados

CVE-2007-3959

Produtos afetados

Ipswitch Collaboration Suite

Ipswitch Instant Messaging

Referências · 7

• http://vupen.com/english/advisories/2007/2621 · Nota
• http://securitytracker.com/id?1018440 · Nota
• http://secunia.com/advisories/26154 · Aviso do Fabricante
• http://ipswitch.com/support/instant_messaging/patch-upgrades.asp · Correção
• http://securityfocus.com/bid/25031 · Correção
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=566 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-3959 · Nota de Segurança