CVE-2006-7038

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) "long command lines at port 32000" and (2) certain name service queries that are not properly handled by the SMTP service.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2007-02-23

Last modified

2024-08-07

Affected products

• Mercur Messaging 2005 (Atrium Software)

References

• http://secunia.com/advisories/20432
• http://www.atrium-software.com/download/McrReadMe_EN.html
• http://www.securityfocus.com/bid/18462
• http://www.vupen.com/english/advisories/2006/2354
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27231