PT-2007-2961 · Atrium · Atrium Mercur Imapd

Mu-B · Published 2007-03-21 · Updated 2017-10-11 · CVE-2007-1578

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Atrium MERCUR IMAPD version 5.00.14 with SP4

Description The issue is related to multiple integer signedness errors in the NTLM implementation, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending a long NTLMSSP argument that triggers a stack-based buffer overflow.

Recommendations For Atrium MERCUR IMAPD version 5.00.14 with SP4, consider disabling the NTLM implementation until a patch is available to prevent exploitation of the integer signedness errors. Restrict access to the NTLMSSP argument to minimize the risk of triggering a stack-based buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-1578

Affected Products

Atrium Mercur Imapd

References · 10

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0280.html · Exploit
• 🔥 http://securityfocus.com/bid/23058 · Exploit
• 🔥 http://digit-labs.org/files/exploits/mercur-v1.pl · Exploit
• 🔥 http://securitytracker.com/id?1017798 · Exploit
• 🔥 https://exploit-db.com/exploits/3527 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1578 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33120 · Note
• http://vupen.com/english/advisories/2007/1053 · Note
• http://osvdb.org/33545 · Note
• http://secunia.com/advisories/24596 · Note