Ipswitch Imail Server - List Mailer Reply-To Address Memory Corruption

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | To: To Person """ ReplayCount = 5 while ReplayCount0: message = message + "Reply-To:" counter = 3 while counter0: if counter != 50000 : message = message + "," message = message + "Reply-To: " message = message +...

Ipswitch Imail Server - List Mailer Reply-To Address Memory Corruption

Ipswitch Imail Server - List Mailer Reply-To Address Memory Corruption ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | To: To Person """ ReplayCount = 5 while ReplayCount0: message = message + "Reply-To:" counter = 3 while counter0: if counter != 50000 : message...

Ipswitch IMail Server Mailing List Message Subject Buffer Overflow

The Ipswitch IMail Server is a mail server product geared towards medium to large size organizations. It contains implementations of POP3, IMAP4, and SMTP servers. The SMTP server module is installed and started in a default installation. A buffer overflow vulnerability has been reported in...

ZDI-10-127: Ipswitch Imail Server Mailing List Remote Code Execution Vulnerability

ZDI-10-127: Ipswitch Imail Server Mailing List Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-127 July 15, 2010 -- CVSS: 9, AV:N/AC:L/Au:S/C:C/I:C/A:C -- Affected Vendors: Ipswitch -- Affected Products: Ipswitch IMail -- TippingPointTM IPS Customer...

Ipswitch Imail multiple security vulnerabilities

Format string vulnerabilities, unfiltered shell-characters, code execution...

ZDI-10-126: Ipswitch Imail Server List Mailer Reply-To Address Remote Code Execution Vulnerability

ZDI-10-126: Ipswitch Imail Server List Mailer Reply-To Address Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-126 July 15, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Ipswitch -- Affected Products: Ipswitch IMail -- TippingPointTM IPS...

ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability

ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-128 July 15, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Ipswitch -- Affected Products: Ipswitch IMail -- TippingPointTM IPS Custom...

Ipswitch IMail Server < 11.02 Multiple Vulnerabilities

Ipswitch IMail Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ipswitch:imailserver"...

Ipswitch IMail Server < 11.02 Multiple Vulnerabilities

Binary data 5600.prm...

Ipswitch IMail Server < 11.02 Multiple Vulnerabilities

The remote host appears to be running Ipswitch IMail Server prior to version 11.02. It is, therefore, affected by multiple issues : - By sending a specially crafted message to imailsrv.exe with multiple 'Reply-To' headers set, it may be possible for a remote, unauthenticated attacker to execute...

Ipswitch IMail Server邮件列表imailsrv.exe栈溢出漏洞

BUGTRAQ ID: 41719 Ipswitch IMail Server是Ipswitch协作组件中捆绑的一个邮件服务器。 imailsrv.exe进程用于处理发送给imailsrv的消息。如果消息标题中包含有“?Q?”运算符，则该序列之后的字符串未经长度检查便被拷贝到了本地栈缓冲区，导致执行任意代码。 如果要到达这个代码路径，邮件列表必须受口令保护（需认证情况），或之前已经配置了口令（无需认证情况）。 Ipswitch IMail 11.01 厂商补丁： Ipswitch -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Ipswitch IMail Server < 11.02 multiple Vulnerabilities

Ipswitch IMail Server Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2 or any later version, as published by the Free Software Foundation. This program is...

Ipswitch Imail Server Mailing List Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IPSwitch IMail. Authentication might be required to exploit this vulnerability. The specific flaw exists within imailsrv.exe which is invoked to handle messages sent to the imailsrv. When a message...

Ipswitch Imail Server List Mailer Reply-To Address Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IPSwitch IMail List Mailer. Authentication is not required to exploit this vulnerability. The specific flaw exists within imailsrv.exe which is invoked to handle messages sent to the imailsrv. When...

Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IPSwitch IMail. Authentication is not required to exploit this vulnerability. The specific flaw exists within SMTPDLL.dll called by queuemgr.exe. When handling a message queued for remote delivery...

Ipswitch IMail Server - IMAP SEARCH Buffer Overflow (Metasploit)

$Id: ipswitchsearch.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

IPSwitch IMail LDAP Daemon/Service - Remote Buffer Overflow (Metasploit)

$Id: imailthc.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Ipswitch IMail Server - IMAP4 Server (IMail 11.01) Password Decryptor

No description provided by source. !/usr/bin/python Ipswitch IMail Server - IMAP4 Server IMail 11.01 Password Decryptor Tested on: Windows XP SP3 Windows version does not matter Description: So I reverse engineered the IMail password decryption function in IMailsec.dll, located at 0x00563130. In...

CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities &#40;reversible encryption + weak ACL&#41;

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | | |------------------------------------------------- EIP Hunters...

Ipswitch IMail Server Multiple Local Privilege Escalation Vulnerabilities

Ipswitch IMail Server is prone to multiple local privilege-escalation vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...