Unscored severity · published Jul 24, 2007
CVE-2007-3959
The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to…
–
CVSS
6.5%
EPSS
No
On KEV
Description
The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.5% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Imserver · Ipswitch
2.0.5.30 · source: NVD
IC
Ipswitch Collaboration Suite · Ipswitch
through 2.07 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3959
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3959
Patch
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=566
Patch
http://secunia.com/advisories/26154
Patch
http://www.ipswitch.com/support/instant_messaging/patch-upgrades.asp
Patch
http://www.securityfocus.com/bid/25031
www.securitytracker.com
http://www.securitytracker.com/id?1018440
www.vupen.com
http://www.vupen.com/english/advisories/2007/2621
More from Imserver
–
CVE-2008-0945
Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated…
–
CVE-2008-0946
Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create…