Unspecified vulnerability in Kerio MailServer before 6.3.1 allows remote attackers to cause a denial of service (segmentation fault and service stop) via certain long LDAP queries, as demonstrated by vd_kms6.pm.

The remote host is running Kerio MailServer, a commercial mail server available for Windows, Linux, and Mac OS X platforms. 

According to its banner, the LDAP service associated with the installed version of Kerio MailServer terminates abnormally when it receives certain malformed LDAP search requests.  An unauthenticated, remote attacker can exploit this issue to deny access to legitimate users.

Detections

Analytics

CVE-2006-6554

high

Tenable Plugins

medium