CVE-2006-6554 Unspecified vulnerability in Kerio MailServer before 6.3.1 allows remote attackers to cause a denial of service (segmentation fault and service stop) via certain long LDAP queries, as demonstrated by....
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Kerio MailServer before 6.3.1 allows remote attackers to cause a denial of service (segmentation fault and service stop) via certain long LDAP queries, as demonstrated by vd_kms6.pm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kerio mailserver | <= 6.3.0 | No fix listed |
| kerio mailserver | = 5.0 | No fix listed |
| kerio mailserver | = 5.1 | No fix listed |
| kerio mailserver | = 5.1.1 | No fix listed |
| kerio mailserver | = 5.6.3 | No fix listed |
| kerio mailserver | = 5.6.4 | No fix listed |
| kerio mailserver | = 5.6.5 | No fix listed |
| kerio mailserver | = 5.7.0 | No fix listed |
| kerio mailserver | = 5.7.1 | No fix listed |
| kerio mailserver | = 5.7.2 | No fix listed |
| kerio mailserver | = 5.7.3 | No fix listed |
| kerio mailserver | = 5.7.4 | No fix listed |
| kerio mailserver | = 5.7.5 | No fix listed |
| kerio mailserver | = 5.7.6 | No fix listed |
| kerio mailserver | = 5.7.7 | No fix listed |
| kerio mailserver | = 5.7.8 | No fix listed |
| kerio mailserver | = 5.7.9 | No fix listed |
| kerio mailserver | = 5.7.10 | No fix listed |
| kerio mailserver | = 6.0 | No fix listed |
| kerio mailserver | = 6.0.0 | No fix listed |
| kerio mailserver | = 6.0.1 | No fix listed |
| kerio mailserver | = 6.0.2 | No fix listed |
| kerio mailserver | = 6.0.3 | No fix listed |
| kerio mailserver | = 6.0.4 | No fix listed |
| kerio mailserver | = 6.0.5 | No fix listed |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| kerio mailserver | = 6.0.6 | No fix listed |
| kerio mailserver | = 6.0.7 | No fix listed |
| kerio mailserver | = 6.0.8 | No fix listed |
| kerio mailserver | = 6.1.3_patch_1 | No fix listed |
References
- 23364 patch third-party-advisory vendor-advisory
- www.kerio.com patch
- 20061214 Kerio MailServer < 6.3.1 remote Denial of Service mailing-list
- ADV-2006-4993 vdb-entry vendor-advisory
- keriomailserver-ldap-dos(30872) vdb-entry