Secunia Logo
 
CVE Reference: CVE-2007-1578
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-1578

Description:
Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/33120

ST
  1017798

SAID
  Secunia Advisory: SA24596

OSVDB
  33545

MISC
  http://www.digit-labs.org/files/exploits/mercur-v1.pl

MILW0RM
  http://www.milw0rm.com/exploits/3527

FULLDISC
  http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0280.html

BID
  23058


Return to the previous page.