Published: 12/02/2007 Updated: 19/10/2017

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 785

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

axigen 1.2.6 up to and including 2.0.0b1 does not properly parse login credentials, which allows remote malicious users to cause a denial of service (NULL dereference and application crash) via a base64-encoded "*\x00" sequence on the imap port (143/tcp).

Vulnerable Product	Search on Vulmon	Subscribe to Product
gecad technologies axigen mail server 1.2.6
gecad technologies axigen mail server 2.0.0b1

/* doaxigen-v2c * * axigen 126 - 200b1 DoS (x86-lnx) * by mu-b - Sun Oct 29 2006 * * - Tested on: AXIGEN 126 (lnx) * AXIGEN 200b1 (lnx) * * parsing error results in login without username & password! * which in turn causes a NULL pointer dereference */ /* dGFicyBhcmUgZm9yIGZhZ2dvdHNcIQ== */ #include <stdio ...

CWE-476 http://www.securityfocus.com/bid/22473 http://secunia.com/advisories/24073 http://osvdb.org/33165 http://marc.info/?l=full-disclosure&m=117094708423302&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/32345 https://www.exploit-db.com/exploits/3290 https://nvd.nist.gov https://www.exploit-db.com/exploits/3290/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-0887

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect