Vulnerability in New Atlanta Communications Bluedragon Server

CVE-2006-2310

BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file whose name contains an MS-DOS device name such as (1) con, (2) aux, (3) com1, and (4) com2.

EPSS: 0.068 (93.3th percentile) — read the EPSS interpretation.

Affected products

New_atlanta_communications Bluedragon_server — versions 6.2.1.286
New_atlanta_communications Bluedragon_server_jx — versions 6.2.1.286
N/a — versions n/a

References

PSIRT-CNA@flexerasoftware.com (Exploit, Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (Exploit, Patch, vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (Exploit, x_refsource_MISC, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_VUPEN)