CVE-2007-0887

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-02-12 · updated 2026-06-16
Weakness: CWE-476

Description

axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a base64-encoded "*\x00" sequence on the imap port (143/tcp).

Affected products

Gecad Technologies Axigen Mail Server: 1.2.6, 2.0.0b1

References

http://marc.info/?l=full-disclosure&m=117094708423302&w=2
http://osvdb.org/33165
http://secunia.com/advisories/24073
http://www.securityfocus.com/bid/22473
https://exchange.xforce.ibmcloud.com/vulnerabilities/32345
https://www.exploit-db.com/exploits/3290
http://marc.info/?l=full-disclosure&m=117094708423302&w=2
http://osvdb.org/33165
http://secunia.com/advisories/24073
http://www.securityfocus.com/bid/22473
https://exchange.xforce.ibmcloud.com/vulnerabilities/32345
https://www.exploit-db.com/exploits/3290

Get alerted when CVE-2007-0887 or the next vulnerability affects your stack