Vulnerability Details CVE-2006-7038
Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) "long command lines at port 32000" and (2) certain name service queries that are not properly handled by the SMTP service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.6%
CVSS Severity
CVSS v2 Score 7.8
References
- http://secunia.com/advisories/20432
- http://www.atrium-software.com/download/McrReadMe_EN.html
- http://www.securityfocus.com/bid/18462
- http://www.vupen.com/english/advisories/2006/2354
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27231
- http://secunia.com/advisories/20432
- http://www.atrium-software.com/download/McrReadMe_EN.html
- http://www.securityfocus.com/bid/18462
- http://www.vupen.com/english/advisories/2006/2354
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27231
Products affected by CVE-2006-7038
-
cpe:2.3:a:atrium_software:mercur_messaging_2005:5.0_sp3