CVE-2006-7038

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) "long command lines at port 32000" and (2) certain name service queries that are not properly handled by the SMTP service.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www.atrium-software.com/download/McrReadMe_EN.html
http://www.securityfocus.com/bid/18462	Patch
http://secunia.com/advisories/20432	Patch Vendor Advisory
http://www.vupen.com/english/advisories/2006/2354
https://exchange.xforce.ibmcloud.com/vulnerabilities/27231

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:atrium_software:mercur_messaging_2005:5.0_sp3::enterprise:::::
	cpe:2.3:a:atrium_software:mercur_messaging_2005:5.0_sp3::lite:::::
	cpe:2.3:a:atrium_software:mercur_messaging_2005:5.0_sp3::standard:::::

Information

Published : 2007-02-22 19:28

Updated : 2017-07-28 18:29

NVD link : CVE-2006-7038

Mitre link : CVE-2006-7038

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

atrium_software

mercur_messaging_2005

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.atrium-software.com/download/McrReadMe_EN.html", "name": "http://www.atrium-software.com/download/McrReadMe_EN.html", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/18462", "name": "18462", "tags": ["Patch"], "refsource": "BID"}, {"url": "http://secunia.com/advisories/20432", "name": "20432", "tags": ["Patch", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.vupen.com/english/advisories/2006/2354", "name": "ADV-2006-2354", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27231", "name": "mercur-nameserver-dos(27231)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) \"long command lines at port 32000\" and (2) certain name service queries that are not properly handled by the SMTP service."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-7038", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "severity": "HIGH", "impactScore": 6.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2007-02-23T03:28Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:atrium_software:mercur_messaging_2005:5.0_sp3:*:enterprise:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atrium_software:mercur_messaging_2005:5.0_sp3:*:lite:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:atrium_software:mercur_messaging_2005:5.0_sp3:*:standard:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-29T01:29Z"}