CVE-2007-3959
The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179…
Does this matter?
Lower severity and a low EPSS score (6.46%). Track it; it rarely justifies an emergency change on its own.
Description
The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 6.46% probability · 93th percentile
- CISA KEV
- Not listed
- Affected
- ipswitch/imserver · ipswitch/ipswitch collaboration suite
- Source
- cve@mitre.org
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=566Patch
- http://secunia.com/advisories/26154Patch, Vendor Advisory
- http://www.ipswitch.com/support/instant_messaging/patch-upgrades.aspPatch
- http://www.securityfocus.com/bid/25031Patch
- http://www.securitytracker.com/id?1018440
- http://www.vupen.com/english/advisories/2007/2621
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=566Patch
- http://secunia.com/advisories/26154Patch, Vendor Advisory
- http://www.ipswitch.com/support/instant_messaging/patch-upgrades.aspPatch
- http://www.securityfocus.com/bid/25031Patch
- http://www.securitytracker.com/id?1018440
- http://www.vupen.com/english/advisories/2007/2621
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.