medium4.6Public exploit code
CVE-2004-1520
Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IPSwitch IMail IMAP4D - Delete Overflow (Metasploit)2010-09-20 · remote · windows · Verified
- MDaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow (Metasploit)2005-08-12 · remote · windows · Verified
- IPSwitch IMail 8.13 - 'DELETE' Remote Stack Overflow2004-11-12 · remote · windows · Verified
Impact
Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipswitch | Imail | Version 8.13 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110037283803560&w=2
- http://secunia.com/advisories/13200
- http://www.securityfocus.com/bid/11675
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18058
- http://marc.info/?l=bugtraq&m=110037283803560&w=2
- http://secunia.com/advisories/13200
- http://www.securityfocus.com/bid/11675
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18058