high7.5Public exploit code
CVE-2006-0468
CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via LDAP messages wit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CommuniGate Pro 5.0.6 - Server LDAP Denial of Service2006-01-28 · dos · linux · Verified
Impact
CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via LDAP messages with negative BER lengths, and possibly other vectors, as demonstrated by the ProtoVer LDAP test suite.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stalker | Communigate Pro | Versions 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18640
- http://www.gleg.net/advisory_cg.shtml
- http://www.securityfocus.com/archive/1/423364/100/0/threaded
- http://www.securityfocus.com/bid/16407
- http://www.stalker.com/CommuniGatePro/History.html
- http://www.vupen.com/english/advisories/2006/0364
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24409
- http://secunia.com/advisories/18640
- http://www.gleg.net/advisory_cg.shtml
- http://www.securityfocus.com/archive/1/423364/100/0/threaded
- http://www.securityfocus.com/bid/16407
- http://www.stalker.com/CommuniGatePro/History.html
- http://www.vupen.com/english/advisories/2006/0364
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24409