critical10.0Public exploit code
CVE-2004-0297
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IPSwitch IMail LDAP Daemon/Service - Remote Buffer Overflow (Metasploit)2010-04-30 · remote · windows · Verified
- IPSwitch IMail LDAP Daemon/Service - Remote Buffer Overflow2004-02-27 · remote · windows · Verified
Impact
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipswitch | Imail | Versions 8.0.3, 8.0.5 |
References
- NVD record
- CVE.org record
- http://www.idefense.com/application/poi/display?id=74
- http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html
- http://www.kb.cert.org/vuls/id/972334
- http://www.osvdb.org/3984
- http://www.securityfocus.com/bid/9682
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15243
- http://www.idefense.com/application/poi/display?id=74
- http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html
- http://www.kb.cert.org/vuls/id/972334
- http://www.osvdb.org/3984
- http://www.securityfocus.com/bid/9682
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15243