Unscored severity · published Jan 30, 2006
CVE-2006-0468
CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via LDAP messages with negative BER…
–
CVSS
10.5%
EPSS
No
On KEV
Description
CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via LDAP messages with negative BER lengths, and possibly other vectors, as demonstrated by the ProtoVer LDAP test suite.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.5% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Communigate Pro · Stalker
5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0468
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0468
Patch
http://secunia.com/advisories/18640
Patch
http://www.gleg.net/advisory_cg.shtml
www.securityfocus.com
http://www.securityfocus.com/archive/1/423364/100/0/threaded
Patch
http://www.securityfocus.com/bid/16407
www.stalker.com
http://www.stalker.com/CommuniGatePro/History.html
www.vupen.com
http://www.vupen.com/english/advisories/2006/0364
More from Communigate Pro
5.7
CVE-2018-3815
The "XML Interface to Messaging, Scheduling, and Signaling" (XIMSS) protocol implementation in CommuniGate Pro (CGP) 6.2 suffers from a Missing XIMSS Protocol Validation attack…
–
CVE-2007-2718
Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using Microsoft Internet Explorer, allows remote attackers to…
–
CVE-2005-1007
Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service (server crash) via certain multipart messages
–
CVE-2003-1481
CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail…
–
CVE-2002-2375
Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent…