CVE-2007-5094

Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by...

CVE-2007-5094

The CVE pertains to Ipswitch IMail Server (8.01–8.11) where a heap-based buffer overflow in iaspam.dll within the SMTP Server can be triggered by συγκεκριed malformed Content-Type headers (long boundary parameter, a lone “MIME” line, and long Content-Transfer-Encoding lines). This allows remote c...

CVE-2007-5094

Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by...

CVE-2007-5094: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by...

ipswitch80x-heap.txt

/ by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org ÒÔÇ°ÓÐÕâžöÒ»žöimailµÄexp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d options Options: -d: Hostname to attack Required -t: Type Default: 0 -p: Attack port...

Ipswitch IMail SMTP服务器IASPAM.DLL远程缓冲区溢出漏洞

BUGTRAQ ID: 25762 IPSwitch IMail是一款基于Windows的邮件服务程序。 IPSwitch IMail的iaspam.dll中存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 相关细节： loc1001ada5 == 注意动态调试时候注意加载基址的不同。 mov eax, ebp+var54 mov ecx, eax+10c8h push ecx ; char mov edx, ebp+var54 mov eax, edx+10d0h push eax ; char call strcpy add esp, 8 jmp loc1001a6f0...

IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================= IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit ======================================================= / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List:...

IPSwitch IMail Server 8.0x - Remote Heap Overflow

IPSwitch IMail Server 8.0x - Remote Heap Overflow / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org ÒÔÇ°ÓÐÕâžöÒ»žöimailµÄexp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d options Options: -d:...

IPSwitch IMail Server 8.0x Remote Heap Overflow Exploit

No description provided by source. / by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org 脪脭脟掳脫脨脮芒啪枚脪禄啪枚imail碌脛exp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d host options Options: -d: Hostname to attack Required -...

IPSwitch IMail Server 8.0x - Remote Heap Overflow

/ by axis 2007-06-05 http://www.ph4nt0m.org Mail-List: http://list.ph4nt0m.org ÒÔÇ°ÓÐÕâžöÒ»žöimailµÄexp PRIVATE Remote Exploit For IMAIL Smtp Server1.2 This is For imail 8.01-8.11 version Usage:faint.exe -d options Options: -d: Hostname to attack Required -t: Type Default: 0 -p:...

Ipswitch IMail Server IMAP SEARCH Command Date String Stack Overflow (CVE-2007-3925)

...

Ipswitch IMail Server SEARCH命令远程缓冲区溢出漏洞

BUGTRAQ ID: 25176 Ipswitch IMail Server是Ipswitch协作组件中捆绑的一个邮件服务器。 IMail服务器处理SEARCH命令请求的参数时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 IMail服务器在处理SEARCH命令的多个选项（BEFORE,ON,SINCE,SENTBEFORE,SENTON,SENTSINCE）时存在栈缓冲区溢出问题，远程攻击者可以通过提交畸形超长的SEARCH请求触发溢出，导致执行任意指令。 Ipswitch IMail Premium 2006.2 Ipswitch IMail 2006.21...

Ipswitch IMail IMAP SUBSCRIBE command buffer overflow

Added: 08/02/2007 CVE: CVE-2007-3927 BID: 24962 OSVDB: 36222 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service could allow an authenticated attacker to execute arbitrary commands by sending a specially crafted SUBSCRIBE command...

Ipswitch IMail IMAP SUBSCRIBE command buffer overflow

Added: 08/02/2007 CVE: CVE-2007-3927 BID: 24962 OSVDB: 36222 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service could allow an authenticated attacker to execute arbitrary commands by sending a specially crafted SUBSCRIBE command...

Ipswitch IMail IMAP SUBSCRIBE command buffer overflow

Added: 08/02/2007 CVE: CVE-2007-3927 BID: 24962 OSVDB: 36222 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service could allow an authenticated attacker to execute arbitrary commands by sending a specially crafted SUBSCRIBE command...

Ipswitch IMail IMAP SUBSCRIBE command buffer overflow

Added: 08/02/2007 CVE: CVE-2007-3927 BID: 24962 OSVDB: 36222 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service could allow an authenticated attacker to execute arbitrary commands by sending a specially crafted SUBSCRIBE command...

Preemptive Protection against Ipswitch IMail Server IMAP SEARCH Command Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Ipswitch IMail Server IMAP component. Ipswitch IMail server is a messaging service suite that supports numerous mail exchanging protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing e-mail from a local...

Preemptive Protection against Ipswitch IMail Server LOGIN Command Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Ipswitch IMail Server IMAP component. Ipswitch IMail server is a messaging service suite that supports numerous mail exchanging protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing e-mail from a local...

Preemptive Protection against Ipswitch IMail Server IMAP SUBSCRIBE Command Buffer Overflow Vulnerability

A buffer overflow vulnerability exists in Ipswitch IMail Server IMAP component. Ipswitch IMail server is a messaging service suite that supports numerous mail exchanging protocols, including the Internet Message Access Protocol IMAP. IMAP is a standard protocol for accessing e-mail from a local...

IPSwitch IMail Server 2006 9.10 SUBSCRIBE Remote Overflow Exploit

No description provided by source. !/use/bin/perl Test on Imail 20069.10, imap4d32.exe6.8.8.1, windows 2003 Chinese SP1 Code by yunshu, our team: www.ph4nt0m.org Mail list: http://list.ph4nt0m.org F:perl imailSUBSCRIBE.pl 192.168.1.2 testuser testpass OK IMAP4 Server IMail 9.10 0 OK LOGIN complet...