First published: Thu Dec 22 2005(Updated: )
POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted packets.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Avaya Modular Messaging Message Storage Server | =2.0 | |
Avaya Modular Messaging Message Storage Server | =1.1 | |
Avaya Modular Messaging Message Storage Server | <=2.0_sp_4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-4471 is classified as a high severity vulnerability due to its potential to cause a denial of service.
To fix CVE-2005-4471, upgrade the Avaya Modular Messaging Message Storage Server to a version later than 2.0 SP 4.
CVE-2005-4471 affects Avaya Modular Messaging Message Storage Server versions 2.0 SP 4 and earlier as well as version 1.1.
CVE-2005-4471 can be exploited by sending crafted packets to the POP3 service, causing an infinite loop.
There are no known workarounds for CVE-2005-4471; the only solution is to apply the recommended upgrades.