critical9.0Public exploit code
CVE-2007-2795
Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication f…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IPSwitch IMAP Server 9.20 - Remote Buffer Overflow2009-09-14 · remote · windows · Verified
Impact
Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in IMailsec.dll, which triggers heap corruption in the IMail Server, or (2) a long SUBSCRIBE IMAP command, which triggers a stack-based buffer overflow in the IMAP Daemon.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipswitch | Imail | through 2006.2 Version 2006.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ipswitch.com/support/imail/releases/im200621.asp
- http://www.zerodayinitiative.com/advisories/ZDI-07-042/
- http://www.zerodayinitiative.com/advisories/ZDI-07-043/
- http://www.ipswitch.com/support/imail/releases/im200621.asp
- http://www.zerodayinitiative.com/advisories/ZDI-07-042/
- http://www.zerodayinitiative.com/advisories/ZDI-07-043/