Buffer overflow in IPSwitch IMail

Buffer overflow in LDAP and webmail subsystem...

IPSwitch IMail 6.x7.0.x - Web Calendaring Incomplete Post Denial of Service

IPSwitch IMail 6.x7.0.x - Web Calendaring Incomplete Post Denial of Service source: https://www.securityfocus.com/bid/5365/info IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems. When a HTTP...

IPSwitch IMail 6.x/7.0.x - Web Calendaring Incomplete Post Denial of Service

source: https://www.securityfocus.com/bid/5365/info IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems. When a HTTP POST command is made to the web calendaring service on port 8484, and the...

IPSwitch IMail ADVISORY/EXPLOIT/PATCH

"In 1995, Ipswitch released IMail Server, the first commercial NT Mail Server. Seven years later there are over 49 million users of IMail worldwide. IMail Server 7.1 Greater security, improved usability, and new revenue opportunities for service providers." 7 years in development, 20 minutes of...

IPSwitch IMail 6.x7.07.1 - Web Messaging GET Buffer Overflow

IPSwitch IMail 6.x7.07.1 - Web Messaging GET Buffer Overflow // source: https://www.securityfocus.com/bid/5323/info IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems. The web messaging serve...

IPSwitch IMail 6.x/7.0/7.1 - Web Messaging GET Buffer Overflow

// source: https://www.securityfocus.com/bid/5323/info IMail is a commercial email server software package distributed and maintained by Ipswitch, Incorporated. IMail is available for Microsoft Operating Systems. The web messaging server is vulnerable to a buffer overflow. When the server receive...

IPSwitch IMail SMTP Multiple Vulnerabilities (OF, DoS)

A vulnerability exists within IMail that allows remote attackers to gain SYSTEM level access to servers running IMail's SMTP daemon versions 6.06 and below. The vulnerability stems from the IMail SMTP daemon not doing proper bounds checking on various input data that gets passed to the IMail...

Дырка в IMail (buffer overflow)

Переполнение буфера при обработке письма посланного в список рассылки...

Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior

Date: Mon, 20 May 2002 13:24:26 -0700 From: Foundstone Labs [email protected] To: [email protected] Subject: Foundstone Advisory - Buffer Overflow in Ipswitch Imail 7.1 and prior Please disregard the previous email. Can you please forward this to the bugtraq mailing list? Thanks, Marshall...

CVE-2001-1280

Ipswitch IMail POP3 Server 7.04 and earlier is affected by CVE-2001-1280. The vulnerability stems from the POP3 service responding differently to valid versus invalid usernames, enabling remote attackers to enumerate users on the system. Affected component: POP3 service of Ipswitch IMail 7.04 and...

CVE-2001-1285

The CVE-2001-1285 entry describes a directory traversal vulnerability in Ipswitch IMail 7.04 and earlier, exploited via a .. (dot dot) in the mbx parameter to readmail.cgi. Affected component: readmail.cgi in Ipswitch IMail (versions ≤ 7.04). Root cause: improper validation of the mbx parameter a...

CVE-2001-1282

Ipswitch IMail 7.04 and earlier records the physical path of attachments in an e-mail message header, which could allow remote attackers to obtain potentially sensitive configuration information...

CVE-2001-1280

POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system...

CVE-2001-1282

CVE-2001-1282 affects Ipswitch IMail versions 7.04 and earlier. The flaw causes the physical path of email attachments to be recorded in the message header, enabling remote attackers to obtain potentially sensitive configuration information. The available documents do not specify the exact root c...

CVE-2001-1281

Web Messaging Server for Ipswitch IMail 7.04 and earlier is affected. The vulnerability allows remote authenticated users to change information for other users by modifying the olduser parameter in the Change User Information web form. Documented impact is information integrity on user data; expl...

CVE-2001-1286

Ipswitch IMail 7.04 and earlier stores a user’s session ID in a URL, enabling session hijacking if an attacker can obtain the URL (e.g., via an HTML email that causes the Referrer to reveal the URL under the attacker’s control). Affected product: Ipswitch IMail Web Interface. Root cause: session ...

CVE-2001-1284

Ipswitch IMail 7.04 and earlier are affected by predictable session IDs used for authentication, enabling remote attackers to hijack other users’ sessions. Root cause: predictable session identifiers in the authentication flow. Impact: remote session hijacking with partial confidentiality/integri...

CVE-2001-1287

CVE-2001-1287 describes a buffer overflow in the Web Calendar component of Ipswitch IMail versions up to 7.04 and earlier. The vulnerability allows remote attackers to execute arbitrary code by sending a long HTTP GET request to the affected Web Calendar interface. The provided connected records ...

CVE-2001-1283

The webmail interface for Ipswitch IMail 7.04 and earlier allows remote authenticated users to cause a denial of service crash via a mailbox name that contains a large number of . dot or other characters to programs such as 1 readmail.cgi or 2 printmail.cgi, possibly due to a buffer overflow that...

CVE-2001-1281

Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form...