cbcvebase.
CVE-2007-0887
published 2007-02-12

CVE-2007-0887: axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service (NULL dereference and…

PriorityP335high7.8CVSS 2.0
AVNACLAuNCNINAC
EXPLOIT
EPSS
10.11%
95.1th percentile
axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a base64-encoded "*\x00" sequence on the imap port (143/tcp).

Affected

2 ranges
VendorProductVersion rangeFixed in
gecad_technologiesaxigen_mail_server
gecad_technologiesaxigen_mail_server

CVSS provenance

nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_redhat4.6MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.