Описание
axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a base64-encoded "*\x00" sequence on the imap port (143/tcp).
Ссылки
- Third Party Advisory
- Broken Link
- Permissions Required
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Broken Link
- Permissions Required
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:gecad_technologies:axigen_mail_server:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:gecad_technologies:axigen_mail_server:2.0.0b1:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.14029
Средний
7.8 High
CVSS2
Дефекты
CWE-476
Связанные уязвимости
github
почти 4 года назад
axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a base64-encoded "*\x00" sequence on the imap port (143/tcp).
EPSS
Процентиль: 94%
0.14029
Средний
7.8 High
CVSS2
Дефекты
CWE-476