539 matches found
CVE-2007-3925
Multiple buffer overflows in the IMAP service imapd32.exe in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the 1 Search or 2 Search Charset command...
CVE-2007-3927
Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 1 allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and 2 allow attackers to have an unknown impact via an unspecified vector related to "subscribe."...
CVE-2007-3927
Ipswitch IMail Server 2006 before 2006.21 has a buffer overflow in the IMAP SUBSCRIBE handling that can allow an authenticated attacker to execute arbitrary commands on Windows (IMail service). The issue is described as a SUBSCRIBE-related buffer overflow and other unspecified vectors, with the k...
CVE-2007-3925
Ipswitch IMail Server 2006.x (IMAP service, imapd32.exe) contains multiple buffer overflows in the IMAP SEARCH and SEARCH CHARSET commands. The issue affects 2006.1 up to before 2006.21, enabling a remote authenticated attacker to execute arbitrary code by sending specially crafted commands. The ...
CVE-2007-3927: Undefined Security Weakness
Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 1 allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and 2 allow attackers to have an unknown impact via an unspecified vector related to "subscribe."...
CVE-2007-3925: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in the IMAP service imapd32.exe in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the 1 Search or 2 Search Charset command...
CVE-2007-3926
Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service daemon crash via unspecified vectors involving an "overwritten destructor."...
CVE-2007-3926
CVE-2007-3926 : Ipswitch IMail Server 2006 prior to 2006.21 is vulnerable to a remote denial of service (daemon crash) via unspecified vectors related to an "overwritten destructor". The description indicates the issue affects the IMail 2006 line before release 2006.21 and can be triggered remote...
CVE-2007-3926: Undefined Security Weakness
Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service daemon crash via unspecified vectors involving an "overwritten destructor."...
Ipswitch IMail服务器多个缓冲区溢出漏洞
BUGTRAQ ID: 24962 Ipswitch IMail Server是Ipswitch协作组件中捆绑的一个邮件服务器。 IMail捆绑了一个IMAP守护程序（imapd32.exe）允许用户访问邮件。如果向这个守护程序发送了Search或Search charset IMAP命令的话，就可以分别触发栈溢出和堆溢出漏洞，导致执行任意指令。 Ipswitch IMail 2006 Ipswitch Ipswitch Collaboration Suite 2006 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Ipswitch IMail Server < 2006.21 Multiple Vulnerabilities
Binary data 4141.prm...
iDefense Security Advisory 07.18.07: Ipswitch IMail Server 2006 IMAP Search Command Buffer Overflow Vulnerability
Ipswitch IMail Server 2006 Multiple IMAP Buffer Overflow Vulnerabilities iDefense Security Advisory 07.18.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 18, 2007 I. BACKGROUND Ipswitch Inc.'s IMail Server is an e-mail server aimed at providing easily configured and maintained e-mai...
Ipswitch IMail Server GetIMailHostEntry Memory Corruption Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Ipswitch IMail and ICS server. Authentication is not required to exploit this vulnerability. The specific flaw resides in IMailsec.dll while attempting to authenticate users. The affected component is use...
Ipswitch IMail IMAP Daemon SUBSCRIBE Stack Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Ipswitch IMail and ICS server. Authentication is required to exploit this vulnerability. The specific flaw exists due to a lack of bounds checking during the parsing of arguments to the SUBSCRIBE IMAP...
Ipswitch IMail Server < 2006.21 Multiple Vulnerabilities
The remote host is running Ipswitch IMail, a commercial messaging and collaboration suite for Windows. According to its banner, the version of Ipswitch IMail installed on the remote host has several buffer overflows in its IMAP service component, one of which can be exploited prior to...
Ipswitch IMail IMAP SEARCH Buffer Overflow
This module exploits a stack buffer overflow in Ipswitch IMail Server 2006.1 IMAP SEARCH verb. By sending an overly long string, an attacker can overwrite the buffer and control program execution. In order for this module to be successful, the IMAP user must have at least one message. Module...
IMail IMAP Service DELETE 命令溢出漏洞
Muts 在 IMail Server 中发现一个安全漏洞, 能被恶意用户利用威胁到系统的安全。 这个漏洞的成因是由于IMAP service "IMAP4D32.exe" 在处理 "DELETE" 命令时没有进行边界检查. 如果用户提交"DELETE"命令时附带超长的参数，约 300 字节 将导致缓冲区溢出。 成功利用者可以执行任意代码。 这个风险在 IMAIL 8.13 版本中发现，其它版本可能也受影响。 IMail Server 8.x 限制使用或暂时停用Imail Server !/usr/bin/perl -w IPSwitch-IMail-8.13-DELETE...
IPSwitch IMail Server <= 8.20 IMAPD Remote Buffer Overflow Exploit
No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : Ipswitch IMAIL Server IMAPD 7.13 - 8.20 exploit Site : http://www.ipswitch.com...
IPSwitch IMail Server <= 8.20 IMAPD Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================================== IPSwitch IMail Server = 8.20 IMAPD Remote Buffer Overflow Exploit ================================================================== / Dreatica-FXP crew...
IPSwitch IMail Server 8.20 - IMAPD Remote Buffer Overflow
IPSwitch IMail Server 8.20 - IMAPD Remote Buffer Overflow / Dreatica-FXP crew ---------------------------------------- Target : Ipswitch IMAIL Server IMAPD 7.13 - 8.20 exploit Site : http://www.ipswitch.com Found by : iDEFENSE Security...