Communigate Pro Server LDAP Denial of Service Vulnerability

Bugtraq ID:	16407
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 28 2006 12:00AM
Updated:	Feb 07 2006 08:54PM
Credit:	Reported by Evgeny Legerov <[email protected]>.
Vulnerable:	Stalker Communigate Pro 5.0.6
Not Vulnerable:	Stalker Communigate Pro 5.0.7

Communigate Pro Server LDAP Denial of Service Vulnerability


CommuniGate Pro Server is prone to a remote denial-of-service vulnerability with a potential for arbitrary code execution. This issue reportedly resides in the LDAP component of the application.

CommuniGate Pro Server 5.0.6 is vulnerable; earlier versions may also be affected.

Communigate Pro Server LDAP Denial of Service Vulnerability


Proof of concept code is available.

• /data/vulnerabilities/exploits/CommuniGate_dos.py

Communigate Pro Server LDAP Denial of Service Vulnerability

Solution:

This issue was addressed in CommuniGate Pro 5.0.7. Contact the vendor to obtain fixes.

Communigate Pro Server LDAP Denial of Service Vulnerability

References:

• Communigate Pro Homepage (Stalker)
  
• CommuniGate Pro Revision History (Stalker)
  
• Multiple vulnerabilities in CommuniGate Pro Server (Evgeny Legerov )