Description
The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause a denial of service (application crash) via LDAP messages that contain Distinguished Names (DN) fields with a large number of elements.
References
- 18701 third-party-advisory
- http://www.gleg.net/advisory_cg2.shtml
- communigate-ldap-bo(24409) vdb-entry
- ADV-2006-0444 vdb-entry
- 20060204 ProtoVer LDAP vs CommuniGate Pro 5.0.7 mailing-list
- 1015587 vdb-entry
- 22932 vdb-entry
- 416 third-party-advisory
- http://www.stalker.com/CommuniGatePro/History.html