ByteOS Network

NVD Vulnerability Details :

CVE-2007-3959

Modified

Source-cve@mitre.org

Published At-24 Jul, 2007 | 18:30

Updated At-08 Mar, 2011 | 02:57

The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

Ipswitch, Inc.

>>imserver>>2.0.5.30

cpe:2.3:a:ipswitch:imserver:2.0.5.30:*:*:*:*:*:*:*

Ipswitch, Inc.

>>ipswitch_collaboration_suite>>Versions up to 2.07(inclusive)

cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=566	cve@mitre.org	Patch
http://secunia.com/advisories/26154	cve@mitre.org	Patch Vendor Advisory
http://www.ipswitch.com/support/instant_messaging/patch-upgrades.asp	cve@mitre.org	Patch
http://www.securityfocus.com/bid/25031	cve@mitre.org	Patch
http://www.securitytracker.com/id?1018440	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2007/2621	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History