medium6.5Public exploit code
CVE-2007-3925
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ipswitch IMail Server - IMAP SEARCH Buffer Overflow (Metasploit)2010-06-15 · remote · windows · Verified
- IPSwitch IMail Server 2006 - SEARCH Remote Stack Overflow2007-07-25 · remote · windows · Verified
Impact
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipswitch | Imail Server | through 2006.2 |
| Ipswitch | Ipswitch Collaboration Suite | through 2006.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=563
- http://secunia.com/advisories/26123
- http://www.securityfocus.com/bid/24962
- http://www.securitytracker.com/id?1018419
- http://www.vupen.com/english/advisories/2007/2574
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35496
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35500
- http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=563
- http://secunia.com/advisories/26123
- http://www.securityfocus.com/bid/24962
- http://www.securitytracker.com/id?1018419
- http://www.vupen.com/english/advisories/2007/2574
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35496
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35500