CVEvulnerability

CVE-2007-6101

4.0 MEDIUM Published 2007-11-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-11-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-20

Description

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecified messages.

Affected configurations

• code-crafters ability mail server 1.18 • code-crafters ability mail server 2.01b • code-crafters ability mail server 2.02b • code-crafters ability mail server 2.03b • code-crafters ability mail server 2.04b • code-crafters ability mail server 2.05b • code-crafters ability mail server 2.10 • code-crafters ability mail server 2.11 • code-crafters ability mail server 2.12 • code-crafters ability mail server 2.13 • code-crafters ability mail server 2.14 • code-crafters ability mail server 2.15 • code-crafters ability mail server 2.16 • code-crafters ability mail server 2.17 • code-crafters ability mail server 2.18 • code-crafters ability mail server 2.19 • code-crafters ability mail server 2.20 • code-crafters ability mail server 2.21 • code-crafters ability mail server 2.22 • code-crafters ability mail server 2.23 • code-crafters ability mail server 2.50 • code-crafters ability mail server 2.51 • code-crafters ability mail server 2.52 • code-crafters ability mail server 2.53 • code-crafters ability mail server 2.54 • code-crafters ability mail server 2.55 • code-crafters ability mail server 2.56 • code-crafters ability mail server 2.57 • code-crafters ability mail server 2.58 • code-crafters ability mail server 2.60

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References