Rockliffe MailSite Multiple Unspecified Remote LDAP Vulnerabilities

Bugtraq ID:	16675
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Feb 15 2006 12:00AM
Updated:	Feb 15 2006 10:52PM
Credit:	Discovery is credited to Evgeny Legerov.
Vulnerable:	Rockliffe MailSite 7.0.3 1 Rockliffe MailSite 6.1.22 Rockliffe MailSite 5.3.4 Rockliffe MailSite 4.2.1 0 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 Rockliffe MailSite 5
Not Vulnerable:

Rockliffe MailSite Multiple Unspecified Remote LDAP Vulnerabilities

Rockliffe MailSite is prone to multiple unspecified vulnerabilities. These issues may be triggered by malformed LDAP data.

The exact impact of these vulnerabilities is not known at this time. Although the issues are known to crash the server, the possibility of remote code execution is unconfirmed.

This BID will be updated as further information is made available.

Rockliffe MailSite Multiple Unspecified Remote LDAP Vulnerabilities

These issues can be reproduced by utilizing the ProtoVer LDAP test suite.

Rockliffe MailSite Multiple Unspecified Remote LDAP Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Rockliffe MailSite Multiple Unspecified Remote LDAP Vulnerabilities

References:

• [Dailydave] MailSite (WorldMail) fun (Evgeny Legerov)
  
• MailSite Product Home Page (Rockliffe)
  
• ProtoVer Sample LDAP testsuite (Gleg Ltd)