Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecified messages.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:39
Type | Values Removed | Values Added |
---|---|---|
References | () http://osvdb.org/42399 - | |
References | () http://osvdb.org/42400 - | |
References | () http://secunia.com/advisories/27736 - Vendor Advisory | |
References | () http://www.code-crafters.com/abilitymailserver/updatelog.html - Patch | |
References | () http://www.securityfocus.com/bid/26514 - Patch | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/38586 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/38587 - |
Information
Published : 2007-11-23 20:46
Updated : 2024-11-21 00:39
NVD link : CVE-2007-6101
Mitre link : CVE-2007-6101
CVE.ORG link : CVE-2007-6101
JSON object : View
Products Affected
code-crafters
- ability_mail_server
CWE
CWE-20
Improper Input Validation