4
CVE-2007-6101
- EPSS 1.35%
- Veröffentlicht 23.11.2007 20:46:00
- Zuletzt bearbeitet 16.06.2026 22:47:24
- Erkennungen
Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecified messages.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Code-crafters ≫ Ability Mail Server Version 1.18
Code-crafters ≫ Ability Mail Server Version 2.01b
Code-crafters ≫ Ability Mail Server Version 2.02b
Code-crafters ≫ Ability Mail Server Version 2.03b
Code-crafters ≫ Ability Mail Server Version 2.04b
Code-crafters ≫ Ability Mail Server Version 2.05b
Code-crafters ≫ Ability Mail Server Version 2.10
Code-crafters ≫ Ability Mail Server Version 2.11
Code-crafters ≫ Ability Mail Server Version 2.12
Code-crafters ≫ Ability Mail Server Version 2.13
Code-crafters ≫ Ability Mail Server Version 2.14
Code-crafters ≫ Ability Mail Server Version 2.15
Code-crafters ≫ Ability Mail Server Version 2.16
Code-crafters ≫ Ability Mail Server Version 2.17
Code-crafters ≫ Ability Mail Server Version 2.18
Code-crafters ≫ Ability Mail Server Version 2.19
Code-crafters ≫ Ability Mail Server Version 2.20
Code-crafters ≫ Ability Mail Server Version 2.21
Code-crafters ≫ Ability Mail Server Version 2.22
Code-crafters ≫ Ability Mail Server Version 2.23
Code-crafters ≫ Ability Mail Server Version 2.50
Code-crafters ≫ Ability Mail Server Version 2.51
Code-crafters ≫ Ability Mail Server Version 2.52
Code-crafters ≫ Ability Mail Server Version 2.53
Code-crafters ≫ Ability Mail Server Version 2.54
Code-crafters ≫ Ability Mail Server Version 2.55
Code-crafters ≫ Ability Mail Server Version 2.56
Code-crafters ≫ Ability Mail Server Version 2.57
Code-crafters ≫ Ability Mail Server Version 2.58
Code-crafters ≫ Ability Mail Server Version 2.60
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.35% | 0.679 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://osvdb.org/42399
http://osvdb.org/42400
http://secunia.com/advisories/27736
http://www.code-crafters.com/abilitymailserver/updatelog.html
http://www.securityfocus.com/bid/26514
https://exchange.xforce.ibmcloud.com/vulnerabilities/38586
https://exchange.xforce.ibmcloud.com/vulnerabilities/38587