CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via LDAP messages with negative BER lengths, and possibly other vectors, as demonstrated by the ProtoVer LDAP test suite.

According to its banner, the version of CommuniGate Pro running on the remote host will crash when certain mail clients try to open an empty mailbox.  Remote code execution may even be possible.

The remote host appears to be running CommuniGate Pro, a commercial email and groupware application.  The version of CommuniGate Pro installed on the remote host includes an LDAP server that reportedly fails to handle malformed LDAP requests.  A user can leverage this issue to crash not just the LDAP server but also the entire application on the remote host.

The remote host appears to be running CommuniGate Pro, a commercial email and groupware application. 

The version of CommuniGate Pro installed on the remote host includes an LDAP server that reportedly fails to handle requests with negative BER lengths.  A user can leverage this issue to crash not just the LDAP server but also the entire application on the remote host. Remote code execution may even be possible.

The remote host appears to be running CommuniGate Pro, a commercial email and groupware application.  The version of CommuniGate Pro installed on the remote host includes an LDAP server that reportedly fails to handle requests with negative BER lengths.  A user can leverage this issue to crash not just the LDAP server but also the entire application on the remote host.

ID	Name	Product	Family	Type	Severity
3679	CommuniGate Pro < 5.1c2 POP3 Overflow	Nessus Network Monitor	Web Servers		high
3415	Communigate Pro < 5.0.8 LDAP Module BER Decoding DoS	Nessus Network Monitor	Web Servers		high
20827	CommuniGate Pro Server < 5.0.7 LDAP BER Decoding Multiple Vulnerabilities	Nessus	Windows	Remote	high
3387	Communigate Pro < 5.0.7 LDAP Module BER Decoding DoS	Nessus Network Monitor	Web Servers		high

Detections

Analytics

CVE-2006-0468

critical

Tenable Plugins

high

high

high

high