MailSite LDAP Service Denial of Service Vulnerability - Advisories

MailSite LDAP Service Denial of Service Vulnerability

Secunia Advisory:	SA18888
Release Date:	2006-02-15
Last Update:	2006-02-23

Critical:	Less critical
Impact:	DoS
Where:	From local network
Solution Status:	Unpatched

Software:	MailSite 5.x MailSite 6.x MailSite 7.x

CVE reference:	CVE-2006-0790 (Secunia mirror)

	This advisory is currently marked as unpatched! - Companies can be alerted when a patch is released!

Description: Evgeny Legerov has reported a vulnerability in MailSite, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error in the LDAP server within the handling of certain requests. This can be exploited to crash the service by sending malformed LDAP packets to port 389/tcp. Solution: Restrict access to the LDAP service. Provided and/or discovered by: Evgeny Legerov, GLEG Ltd. Changelog: 2006-02-23: Added CVE reference. Original Advisory: http://lists.immunitysec.com/pipermail/dailydave/2006-February/002926.html



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

4 Related Secunia Security Advisories

1. MailSite Cross-Site Scripting and Denial of Service

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Opera Multiple Vulnerabilities

2.	Microsoft Outlook Express MHTML URL Processing Vulnerability

3.	Folder Lock Weak Password Encryption Security Issue

4.	neon "parse_domain() " Denial of Service Vulnerability

5.	vBulletin Private Message Subject Script Insertion

6.	SunShop Shopping Cart class.ajax.php SQL Injection Vulnerabilities

7.	Short Url & Url Tracker Script "id" SQL Injection Vulnerability

8.	Anzio Web Print Object (WePO) ActiveX Component "mainurl" Buffer Overflow

9.	PluggedOut Blog "index.php" SQL Injection Vulnerabilities

10.	Vanilla Multiple Vulnerabilities