Lucene search

[email protected]CVE-2005-4471

HistoryDec 22, 2005 - 12:03 a.m.

CVE-2005-4471

2005-12-2200:03:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-4471

avaya

modular messaging

message storage server

mss

denial of service

remote attackers

crafted packets

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.014 Low

EPSS

Percentile

86.0%

JSON

POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted packets.

CPENameOperatorVersion
avaya:modular_messaging_message_storage_serveravaya modular messaging message storage servereq2.0
avaya:modular_messaging_message_storage_serveravaya modular messaging message storage servereq1.1
avaya:modular_messaging_message_storage_serveravaya modular messaging message storage serverle2.0_sp_4

CPE	Name	Operator	Version
avaya:modular_messaging_message_storage_server	avaya modular messaging message storage server	eq	2.0
avaya:modular_messaging_message_storage_server	avaya modular messaging message storage server	eq	1.1
avaya:modular_messaging_message_storage_server	avaya modular messaging message storage server	le	2.0_sp_4

References

secunia.com/advisories/18204

support.avaya.com/elmodocs2/security/ASA-2005-235.pdf

www.securityfocus.com/bid/16024

www.vupen.com/english/advisories/2005/3026

7.4 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.014 Low

EPSS

Percentile

86.0%

JSON