Detections
Analytics
CommuniGate Pro < 5.1c2 POP3 Overflow
high Nessus Network Monitor Plugin ID 3679
Synopsis
The remote mail server is prone to multiple attack vectors.Description
According to its banner, the version of CommuniGate Pro running on the remote host will crash when certain mail clients try to open an empty mailbox. Remote code execution may even be possible.Solution
Upgrade to version 5.1c2 or higher.See Also
http://www.stalker.com/CommuniGatePro/History.html
http://www.securityfocus.com/archive/1/423364
http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041863.html
Plugin Details
Severity: High
ID: 3679
Family: Web Servers
Published: 7/5/2006
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 6.3
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 6.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:U/RL:U/RC:C
Vulnerability Information
CPE: cpe:/a:stalker:communigate_pro
Reference Information
CVE: CVE-2006-0468, CVE-2006-3477