Ipswitch IMail Server IMAP SEARCH buffer overflow

Added: 07/27/2007 CVE: CVE-2007-3925 BID: 24962 OSVDB: 36219 Background IMail is an e-mail server for Windows platforms. Problem A buffer overflow vulnerability in the IMAP service could allow an authenticated attacker to execute arbitrary commands by sending a specially crafted SEARCH command...

IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow

IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow !/use/bin/perl Test on Imail 20069.10, imap4d32.exe6.8.8.1, windows 2003 Chinese SP1 Code by yunshu, our team: www.ph4nt0m.org Mail list: http://list.ph4nt0m.org F:\perl imailSUBSCRIBE.pl 192.168.1.2 testuser testpass OK IMAP4 Server IMa...

IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow

!/use/bin/perl Test on Imail 20069.10, imap4d32.exe6.8.8.1, windows 2003 Chinese SP1 Code by yunshu, our team: www.ph4nt0m.org Mail list: http://list.ph4nt0m.org F:\perl imailSUBSCRIBE.pl 192.168.1.2 testuser testpass OK IMAP4 Server IMail 9.10 0 OK LOGIN completed FLAGS \Answered \Flagged \Delet...

IPSwitch IMAIL IMAP server buffer overflow

Buffer overflow in SEARCH and SUBSCRIBE commands and also during authentication procedure...

IPSwitch IMail Server 2006 - SEARCH Remote Stack Overflow

!/use/bin/perl Ipswitch IMail Server 2006 IMAP SEARCH COMMAND Stack Overflow Exploit Author: ZhenHan.Liuph4nt0m.org Date: 2007-07-25 Team: Ph4nt0m Security Team http://www.ph4nt0m.org Vuln Found by: Manuel Santamarina Suarez http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=563...

IPSwitch IMail Server 2006 SEARCH Remote Stack Overflow Exploit

No description provided by source. !/use/bin/perl Ipswitch IMail Server 2006 IMAP SEARCH COMMAND Stack Overflow Exploit Author: ZhenHan.Liuph4nt0m.org Date: 2007-07-25 Team: Ph4nt0m Security Team http://www.ph4nt0m.org Vuln Found by: Manuel Santamarina Suarez...

Buffer overflow

Multiple buffer overflows in the IMAP service imapd32.exe in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the 1 Search or 2 Search Charset command...

CVE-2007-3925

Multiple buffer overflows in the IMAP service imapd32.exe in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the 1 Search or 2 Search Charset command...

CVE-2007-3925

Ipswitch IMail Server 2006.x (IMAP service, imapd32.exe) contains multiple buffer overflows in the IMAP SEARCH and SEARCH CHARSET commands. The issue affects 2006.1 up to before 2006.21, enabling a remote authenticated attacker to execute arbitrary code by sending specially crafted commands. The ...

CVE-2007-3925

Multiple buffer overflows in the IMAP service imapd32.exe in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the 1 Search or 2 Search Charset command...

Ipswitch IMail服务器多个缓冲区溢出漏洞

BUGTRAQ ID: 24962 Ipswitch IMail Server是Ipswitch协作组件中捆绑的一个邮件服务器。 IMail捆绑了一个IMAP守护程序（imapd32.exe）允许用户访问邮件。如果向这个守护程序发送了Search或Search charset IMAP命令的话，就可以分别触发栈溢出和堆溢出漏洞，导致执行任意指令。 Ipswitch IMail 2006 Ipswitch Ipswitch Collaboration Suite 2006 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

[SECURITY] Fedora 7 Update: nginx-0.5.28-1.fc7

Nginx engine x is an HTTPS server, HTTPS reverse proxy and IMAP/POP3 proxy server written by Igor Sysoev...

Ipswitch IMail IMAP Daemon SUBSCRIBE Stack Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Ipswitch IMail and ICS server. Authentication is required to exploit this vulnerability. The specific flaw exists due to a lack of bounds checking during theparsing of arguments to the SUBSCRIBE IMAP...

iDefense Security Advisory 07.18.07: Ipswitch IMail Server 2006 IMAP Search Command Buffer Overflow Vulnerability

Ipswitch IMail Server 2006 Multiple IMAP Buffer Overflow Vulnerabilities iDefense Security Advisory 07.18.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 18, 2007 I. BACKGROUND Ipswitch Inc.'s IMail Server is an e-mail server aimed at providing easily configured and maintained e-mai...

Debian DSA-1325-1 : evolution - several vulnerabilities

Several remote vulnerabilities have been discovered in Evolution, a groupware suite with mail client and organizer. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1002 Ulf Harnhammar discovered that a format string vulnerability in the handling of...

GLSA-200707-03 : Evolution: User-assisted remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200707-03 Evolution: User-assisted remote execution of arbitrary code The imaprescan function of the file camel-imap-folder.c does not properly sanitize the 'SEQUENCE' response sent by an IMAP server before being used to index...

Evolution: User-assisted remote execution of arbitrary code

Background Evolution is the mail client of the GNOME desktop environment. Camel is the Evolution Data Server module that handles mail functions. Description The imaprescan function of the file camel-imap-folder.c does not properly sanitize the "SEQUENCE" response sent by an IMAP server before bei...

[SECURITY] [DSA 1325-1] New evolution packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1325-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 29th, 2007 http://www.debian.org/security/faq -...

Fedora Core 6 : evolution-data-server-1.8.3-7.fc6 (2007-594)

This update fixes a security flaw in Evolution's IMAP module. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Debian DSA-1321-1 : evolution-data-server - programming error

It was discovered that the IMAP code in the Evolution Data Server performs insufficient sanitising of a value later used an array index, which can lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...