critical10.0Public exploit code
CVE-2005-1255
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IPSwitch IMail Server 8.20 - IMAPD Remote Buffer Overflow2007-04-01 · remote · windows · Verified
- IPSwitch IMail Server 8.15 - IMAPD Remote Code Execution2005-08-01 · remote · linux · Verified
- IPSwitch IMAP Server - LOGON Remote Stack Overflow2005-06-07 · remote · windows · Verified
Impact
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with (1) a long username argument or (2) a long username argument that begins with a special character.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipswitch | Imail | Versions 8.12, 8.13 |
| Ipswitch | Imail Server | through 8.2_hotfix_2 |
| Ipswitch | Ipswitch Collaboration Suite | All versions |
References
- NVD record
- CVE.org record
- http://securitytracker.com/id?1014047
- http://www.idefense.com/application/poi/display?id=243&type=vulnerabilities
- http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
- http://www.securityfocus.com/bid/13727
- http://securitytracker.com/id?1014047
- http://www.idefense.com/application/poi/display?id=243&type=vulnerabilities
- http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html
- http://www.securityfocus.com/bid/13727