PT-2007-5179 · Ipswitch · Ipswitch Instant Messaging+1

Published 2007-07-24 · Updated 2011-03-08 · CVE-2007-3959

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Ipswitch Instant Messaging versions 2.0.5.30 and earlier Ipswitch Collaboration Suite (ICS) versions prior to 2.07

Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending certain data to TCP port 5179. This can be achieved through the DoAttachVideoSender, DoAttachAudioSender, DoAttachVideoReceiver, and DoAttachAudioReceiver functions, which can overwrite a destructor.

Recommendations: For Ipswitch Instant Messaging versions 2.0.5.30 and earlier, update to Ipswitch Collaboration Suite (ICS) version 2.07 or later. For Ipswitch Collaboration Suite (ICS) versions prior to 2.07, update to version 2.07 or later.

Fix

Related Identifiers

CVE-2007-3959

Affected Products

Ipswitch Collaboration Suite

Ipswitch Instant Messaging

References · 7

• http://secunia.com/advisories/26154 · Vendor Advisory
• http://ipswitch.com/support/instant_messaging/patch-upgrades.asp · Patch
• http://securityfocus.com/bid/25031 · Patch
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=566 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-3959 · Security Note
• http://vupen.com/english/advisories/2007/2621 · Note
• http://securitytracker.com/id?1018440 · Note