Description
The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.
References
- http://www.ipswitch.com/support/instant_messaging/patch-upgrades.asp
- ADV-2007-2621 vdb-entry
- 25031 vdb-entry
- 26154 third-party-advisory
- 1018440 vdb-entry
- 20070723 Ipswitch Instant Messaging Server Denial of Service Vulnerability third-party-advisory