PT-2006-1628 · Stalker · Communigate Pro Server

Evgeny Legerov · Published 2006-02-06 · Updated 2018-10-19 · CVE-2006-0566

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions CommuniGate Pro Server versions prior to 5.0.8

Description The issue is caused by an error in the LDAP component during handling of LDAP requests containing a large number of elements in the DN (Distinguished Names) field. This can be exploited to crash the service via a specially-crafted LDAP request.

Recommendations For CommuniGate Pro Server versions prior to 5.0.8, update to version 5.0.8 or later to resolve the issue. As a temporary workaround, consider restricting the size of the DN field in LDAP requests to prevent the service from crashing.

Fix

Related Identifiers

CVE-2006-0566

Affected Products

Communigate Pro Server

References · 11

• http://secunia.com/advisories/18701 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-0566 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24409 · Note
• https://cxsecurity.com/issue/WLB-2006020026 · Note
• http://gleg.net/advisory_cg2.shtml · Note
• http://securityreason.com/securityalert/416 · Note
• http://vupen.com/english/advisories/2006/0444 · Note
• http://securitytracker.com/id?1015587 · Note
• http://securityfocus.com/archive/1/423968/100/0/threaded · Note
• http://osvdb.org/22932 · Note
• http://stalker.com/CommuniGatePro/History.html · Note