Ipswitch IMail Server - IMAP SEARCH Buffer Overflow (Metasploit)

$Id: ipswitchsearch.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

CVE-2007-3925

creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16487 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/ipswitchsearch.rb 2025-02-06 03:13:38+00:00| seen|...

Ipswitch IMail IMAP SEARCH Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Ipswitch IMa...

Ipswitch IMail Server IMAP SEARCH Command Date String Stack Overflow (CVE-2007-3925)

...

Ipswitch IMail Server IMAP SEARCH buffer overflow

Added: 07/27/2007 CVE: CVE-2007-3925 BID: 24962 OSVDB: 36219 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service could allow an authenticated attacker to execute arbitrary commands by sending a specially crafted SEARCH command...

Ipswitch IMail Server IMAP SEARCH buffer overflow

Added: 07/27/2007 CVE: CVE-2007-3925 BID: 24962 OSVDB: 36219 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service could allow an authenticated attacker to execute arbitrary commands by sending a specially crafted SEARCH command...

CVE-2007-3925

Ipswitch IMail Server 2006.x (IMAP service, imapd32.exe) contains multiple buffer overflows in the IMAP SEARCH and SEARCH CHARSET commands. The issue affects 2006.1 up to before 2006.21, enabling a remote authenticated attacker to execute arbitrary code by sending specially crafted commands. The ...