critical10.0Public exploit code
CVE-2007-0886
Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbit…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Axigen 2.0.0b1 - Remote Denial of Service (1)2007-02-08 · dos · linux · Verified
Impact
Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via certain base64-encoded data on the pop3 port (110/tcp), which triggers an integer overflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gecad Technologies | Axigen Mail Server | Versions 1.2.6, 2.0.0b1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=full-disclosure&m=117094708423302&w=2
- http://osvdb.org/38133
- http://secunia.com/advisories/24073
- http://www.securityfocus.com/bid/22473
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32342
- https://www.exploit-db.com/exploits/3289
- http://marc.info/?l=full-disclosure&m=117094708423302&w=2
- http://osvdb.org/38133
- http://secunia.com/advisories/24073
- http://www.securityfocus.com/bid/22473
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32342
- https://www.exploit-db.com/exploits/3289