high7.5Public exploit code
CVE-2006-4379
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows r…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow (Metasploit)2007-02-04 · remote · windows · Verified
- Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow2007-02-04 · remote · windows · Verified
- Ipswitch IMail Server 2006 / 8.x - 'RCPT' Remote Stack Overflow2006-10-19 · remote · windows · Verified
Impact
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to execute arbitrary code via a long string located after an '@' character and before a ':' character.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipswitch | Imail Plus | Version 2006 |
| Ipswitch | Imail Secure Server | Version 2006 |
| Ipswitch | Ipswitch Collaboration Suite | Versions 2006_premium, 2006_standard |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21795
- http://securitytracker.com/id?1016803
- http://securitytracker.com/id?1016804
- http://www.ipswitch.com/support/ics/updates/ics20061.asp
- http://www.ipswitch.com/support/imail/releases/im20061.asp
- http://www.securityfocus.com/archive/1/445521/100/0/threaded
- http://www.securityfocus.com/bid/19885
- http://www.vupen.com/english/advisories/2006/3496
- http://www.zerodayinitiative.com/advisories/ZDI-06-028.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28789
- http://secunia.com/advisories/21795
- http://securitytracker.com/id?1016803
- http://securitytracker.com/id?1016804
- http://www.ipswitch.com/support/ics/updates/ics20061.asp
- http://www.ipswitch.com/support/imail/releases/im20061.asp
- http://www.securityfocus.com/archive/1/445521/100/0/threaded
- http://www.securityfocus.com/bid/19885
- http://www.vupen.com/english/advisories/2006/3496
- http://www.zerodayinitiative.com/advisories/ZDI-06-028.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28789