The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably...
Vulnerability Description
The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-3959
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.ipswitch.com/support/instant_messaging/patch-upgrades.asp
- http://www.vupen.com/english/advisories/2007/2621
- http://www.securityfocus.com/bid/25031
- http://secunia.com/advisories/26154
- http://www.securitytracker.com/id?1018440
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=566
More from ipswitch
View All →Affected Vendor
ipswitch
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.