CVE-2006-7041

Description

The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (infinite loop) via a message in which neither the originator nor recipient address is known.

Affected products

• atrium_software / mercur_messaging_20055.0_sp3 – 5.0_sp3
• atrium_software / mercur_messaging_20055.0_sp3 – 5.0_sp3
• atrium_software / mercur_messaging_20055.0_sp3 – 5.0_sp3

References

• MISChttp://www.securityfocus.com/bid/18462
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/2354
• VENDOR_ADVISORYhttp://secunia.com/advisories/20432
• MISChttp://www.atrium-software.com/download/McrReadMe_EN.html
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/27230