CVE-2006-7038: Atrium Software Mercur Messaging 2005

High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days.

Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) "long command lines at port 32000" and (2) certain name service queries that are not properly handled by the SMTP service.

Affected products

• Atrium Software Mercur Messaging 2005: version 5.0_sp3 only

Published 2007-02-23. Last modified 2026-06-16.