Lucene search

K
nvd[email protected]NVD:CVE-2007-3925
HistoryJul 21, 2007 - 12:30 a.m.

CVE-2007-3925

2007-07-2100:30:00
CWE-119
web.nvd.nist.gov
1

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.973

Percentile

99.9%

Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.

Affected configurations

Nvd
Node
ipswitchimail_serverRange2006.2
OR
ipswitchipswitch_collaboration_suiteRange2006.2
VendorProductVersionCPE
ipswitchimail_server*cpe:2.3:a:ipswitch:imail_server:*:*:*:*:*:*:*:*
ipswitchipswitch_collaboration_suite*cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:*:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.973

Percentile

99.9%