CVE-2007-3959 The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of servi...
MediumCVSS 5.0
EPSS 6.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch imserver | = 2.0.5.30 | No fix listed |
| ipswitch collaboration suite | <= 2.07 | No fix listed |
References
- 20070723 Ipswitch Instant Messaging Server Denial of Service Vulnerability patch third-party-advisory
- 26154 patch third-party-advisory vendor-advisory
- www.ipswitch.com patch
- 25031 patch vdb-entry
- 1018440 vdb-entry
- ADV-2007-2621 vdb-entry