Lucene search

MitreCVE-2007-3959

HistoryJul 24, 2007 - 6:30 p.m.

CVE-2007-3959

2007-07-2418:30:00

mitre

web.nvd.nist.gov

cve

im server

dos

tcp

port 5179

ipswitch collaboration suite

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.7

Confidence

High

EPSS

0.035

Percentile

91.6%

JSON

The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.

Affected configurations

Nvd

Node

ipswitchimserverMatch2.0.5.30

ipswitchipswitch_collaboration_suiteRange≤2.07

VendorProductVersionCPE
ipswitchimserver2.0.5.30cpe:2.3:a:ipswitch:imserver:2.0.5.30:*:*:*:*:*:*:*
ipswitchipswitch_collaboration_suite*cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ipswitch	imserver	2.0.5.30	cpe:2.3:a:ipswitch:imserver:2.0.5.30:::::::*
ipswitch	ipswitch_collaboration_suite	*	cpe:2.3:a:ipswitch:ipswitch_collaboration_suite::::::::

References

labs.idefense.com/intelligence/vulnerabilities/display.php?id=566

secunia.com/advisories/26154

www.ipswitch.com/support/instant_messaging/patch-upgrades.asp

www.securityfocus.com/bid/25031

www.securitytracker.com/id?1018440

www.vupen.com/english/advisories/2007/2621

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.7

Confidence

High

EPSS

0.035

Percentile

91.6%

JSON

Related for CVE-2007-3959