Ipswitch IMail 5.0/6.0 - Web Service Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/505/info The IMail web server can be crashed by requesting an abnormally long URL. Telnet to target machine, port 8383 Send: GET /glob1/ Where glob1 is 3000 characters. Marc Maiffret has released the following exploit:...

Ipswitch IMail 5.0 - LDAP Buffer Overflow (Denial of Service) (PoC)

Ipswitch IMail 5.0 - LDAP Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/503/info The IMail ldap service has an unchecked buffer, resulting in a classic buffer overflow vulnerability. While it does not crash the service, it drives CPU utilization up rendering the...

Ipswitch IMail 5.0 - Whois32 Daemon Buffer Overflow (Denial of Service) (PoC)

Ipswitch IMail 5.0 - Whois32 Daemon Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/506/info IMail's whois server can be crashed due to an unchecked buffer. Telnet to target machine, port 43 Send glob1 Where glob1 is 1000 characters...

Ipswitch IMail 5.0 - Imapd Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/502/info The imapd login process is susceptible to a buffer overflow attack which will crash the service. Telnet to target machine, port 143 OK IMAP4 Server IMail 4.06 X LOGIN glob1 glob2 Where glob1 is 1200 characters and glob2 is 1300 characters...

Ipswitch IMail 5.06.0 - Web Service Buffer Overflow (Denial of Service) (PoC)

Ipswitch IMail 5.06.0 - Web Service Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/505/info The IMail web server can be crashed by requesting an abnormally long URL. Telnet to target machine, port 8383 Send: GET /glob1/ Where glob1 is 3000 characters. Marc Maiffre...

Ipswitch IMail 5.0 - IMonitor Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/504/info The IMail IMonitor service can be crashed by exploiting a buffer overflow vulnerability. Telnet to target machine, port 8181 Send: glob1 hit enter twice Where glob1 is 2045 characters...

Ipswitch IMail 5.0 - Whois32 Daemon Buffer Overflow (Denial of Service) (PoC)

source: https://www.securityfocus.com/bid/506/info IMail's whois server can be crashed due to an unchecked buffer. Telnet to target machine, port 43 Send glob1 Where glob1 is 1000 characters...

Ipswitch IMail 5.0 / Ipswitch WS_FTP Server 1.0.1/1.0.2 - Local Privilege Escalation

source: https://www.securityfocus.com/bid/218/info Non-administrative Imail and WSFTP Server users may elevate their privileges to administrator for these applications by modifying a specific registry value. Once a person has obtained administrative privileges, they may use the application...

Ipswitch IMail 5.0 Ipswitch WS_FTP Server 1.0.11.0.2 - Local Privilege Escalation

Ipswitch IMail 5.0 Ipswitch WSFTP Server 1.0.11.0.2 - Local Privilege Escalation source: https://www.securityfocus.com/bid/218/info Non-administrative Imail and WSFTP Server users may elevate their privileges to administrator for these applications by modifying a specific registry value. Once a...

CVE-1999-1170

IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920...

PT-1999-1599 · Ipswitch · Ipswitch Imail

Name of the Vulnerable Software and Affected Versions: IPswitch IMail affected versions not specified Description: The issue allows local users to gain additional privileges and modify or add mail accounts by setting the flags registry key to 1920. This enables unauthorized access and control ove...

CVE-1999-0231

Buffer overflow in IP-Switch IMail and Seattle Labs Slmail 2.6 packages using a long VRFY command, causing a denial of service and possibly remote access...

PT-1999-1021 · Seattle +1 · Slmail +1

Name of the Vulnerable Software and Affected Versions: IP-Switch IMail affected versions not specified Seattle Labs Slmail version 2.6 Description: The issue is related to a buffer overflow caused by a long VRFY command, which can lead to a denial of service and potentially allow for remote acces...

Ipswitch Imail Server 5.0 - SMTP HELO Argument Buffer Overflow

// source: https://www.securityfocus.com/bid/8621/info It has been reported that Ipswitch IMail server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient bounds checking performed when handling malicious SMTP HELO command...

Ipswitch Imail Server 5.0 - SMTP HELO Argument Buffer Overflow

Ipswitch Imail Server 5.0 - SMTP HELO Argument Buffer Overflow // source: https://www.securityfocus.com/bid/8621/info It has been reported that Ipswitch IMail server is prone to an SMTP HELO command argument buffer overflow vulnerability. The issue presents itself likely due to insufficient bound...