CVE-2007-6101

medium

Description

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecified messages.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/38587

https://exchange.xforce.ibmcloud.com/vulnerabilities/38586

http://www.securityfocus.com/bid/26514

http://www.code-crafters.com/abilitymailserver/updatelog.html

http://secunia.com/advisories/27736

http://osvdb.org/42400

http://osvdb.org/42399

Details

Source: Mitre, NVD

Published: 2007-11-23

Updated: 2017-07-29

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H