Detections
Analytics
Ipswitch IM Server < 2.07 Multiple Function Remote DoS
medium Nessus Plugin ID 25762
Synopsis
The remote Windows host contains an application that is affected by a denial of service vulnerability.Description
Ipswitch Instant Messaging Server, a secure, instant messaging product targeted at businesses, is installed on the remote Windows host.The version of Instant Messaging Server on the remote host reportedly allows an unauthenticated attacker to overwrite a destructor and crash the application when it attempts to process malicious traffic in the 'DoAttachVideoSender', 'DoAttachVideoReceiver', 'DoAttachAudioSender', or 'DoAttachAudioReceiver' functions.
Solution
Upgrade to version 2.07 of the IM Server.See Also
http://www.nessus.org/u?4dc3fc68
https://www.securityfocus.com/archive/1/474469/30/0/threaded
http://www.ipswitch.com/support/instant_messaging/patch-upgrades.asp
Plugin Details
Severity: Medium
ID: 25762
File Name: ipswitch_imserver_207.nasl
Version: 1.20
Type: local
Agent: windows
Family: Windows
Published: 7/25/2007
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/a:ipswitch:imserver, cpe:/a:ipswitch:ipswitch_collaboration_suite
Required KB Items: SMB/Registry/Enumerated
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 7/24/2007
Reference Information
CVE: CVE-2007-3959
BID: 25031