Atrium Software Mercur Messaging Multiple Remote Denial Of Service Vulnerabilities

BID:18462

Info

Atrium Software Mercur Messaging Multiple Remote Denial Of Service Vulnerabilities

Bugtraq ID: 18462
Class: Unknown
CVE: CVE-2006-7038
CVE-2006-7039
CVE-2006-7040
CVE-2006-7041
Remote: Yes
Local: Yes
Published: Jun 16 2006 12:00AM
Updated: Jul 06 2016 02:40PM
Credit: The vendor disclosed these issues.
Vulnerable: Atrium Software MERCUR Messaging 2005 Standard Edition 5.0 SP3
Atrium Software MERCUR Messaging 2005 Lite Edition 5.0 SP3
Atrium Software MERCUR Messaging 2005 Enterprise Edition 5.0 SP3
Not Vulnerable: Atrium Software MERCUR Messaging 2005 Service Pack 4

Discussion

Atrium Software Mercur Messaging Multiple Remote Denial Of Service Vulnerabilities

Mercur Messaging is susceptible to multiple denial-of-service vulnerabilities.

These issues allow local and remote attackers to crash the application with specially crafted email messages. These attacks will result in loss of service to legitimate users.

Exploit / POC

Atrium Software Mercur Messaging Multiple Remote Denial Of Service Vulnerabilities

These issues may be exploited via an email application.

Solution / Fix

Atrium Software Mercur Messaging Multiple Remote Denial Of Service Vulnerabilities

Solution:
The vendor has released Service Pack 4 to address these issues; please see the reference section for further details..


Atrium Software MERCUR Messaging 2005 Lite Edition 5.0 SP3

Atrium Software MERCUR Messaging 2005 Standard Edition 5.0 SP3

Atrium Software MERCUR Messaging 2005 Enterprise Edition 5.0 SP3

References

Atrium Software Mercur Messaging Multiple Remote Denial Of Service Vulnerabilities

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report