Unscored severity · published Dec 22, 2005
CVE-2005-4471
POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted packets
–
CVSS
2.4%
EPSS
No
On KEV
Description
POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Modular Messaging Message Storage Server · Avaya
through 2.0_sp_4; 1.1; 2.0 · source: NVD
Affected product
MM
Modular Messaging Message Storage Server
Avaya
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4471
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4471
Patch
http://secunia.com/advisories/18204
Exploit
http://support.avaya.com/elmodocs2/security/ASA-2005-235.pdf
www.securityfocus.com
http://www.securityfocus.com/bid/16024
www.vupen.com
http://www.vupen.com/english/advisories/2005/3026
More from Modular Messaging Message Storage Server
–
CVE-2005-0003
The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows…
–
CVE-2004-1235
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute…
–
CVE-2004-1050
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements,…
–
CVE-2004-0842
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain…
–
CVE-2004-0841
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window,…