CVE-2005-1252

Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via ".." dot dot backslash sequences in the query string argument in a GET request to a non-existent .jsp...

CVE-2005-1254

Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to cause a denial of service crash via a SELECT command with a large argument...

CVE-2005-1254

The CVE-2005-1254 issue affects Ipswitch IMail IMAP server (versions 8.12 and 8.13; older versions before IMail Server 8.2 Hotfix 2 are also mentioned). It is caused by a stack-based buffer overflow when processing long arguments to the SELECT command (approximately 260 bytes), leading to a remot...

iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP STATUS Remote Buffer Overflow Vulnerability

Ipswitch IMail IMAP STATUS Remote Buffer Overflow Vulnerability iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=244&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch Collaboration Suite ICS is a comprehensive communication and collaboration solution for...

iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP SELECT Command DoS Vulnerability

Ipswitch IMail IMAP SELECT Command DoS Vulnerability iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=241&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch IMail server is a Windows based messaging solution with a customer base of over 53 million users. More...

iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability

Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability iDEFENSE Security Advisory 05.24.05 www.idefense.com/application/poi/display?id=242&type=vulnerabilities May 24, 2005 I. BACKGROUND Ipswitch Collaboration Suite ICS is a comprehensive communication and collaboration solution for...

Ipswitch IMail Web Calendaring Server GET Request Traversal Arbitrary File Access

The remote server is running Ipswitch IMail Web calendaring. The remote version of this software is vulnerable to a directory traversal attack. An attacker, exploiting this vulnerability, may be able to retrieve sensitive files present on the server. %NASLMINLEVEL 70300 C Tenable Network Security...

Ipswitch IMail Server Multiple Vulnerabilities

Description Ipswitch IMail is prone to multiple remote vulnerabilities. Attackers may exploit these issues to deny service for legitimate users, obtaoin potentially sensitive information, and execute arbitrary code. The vulnerabilities include a directory-traversal issue, two remote...

CVE-1999-1557

Buffer overflow in the login functions in IMAP server imapd in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via 1 a long user name or 2 a long password...

IPSwitch IMAIL Mail server IMAP buffer overflow

Buffer overflow in IMAP DELETE and EXAMINE commands...

Ipswitch IMail IMAP EXAMINE Argument Buffer Overflow

The remote host is running a version of the Ipswitch Collaboration Suite / Ipswitch IMail IMAP server that is prone to a buffer overflow when processing an EXAMINE command with a long argument. Specifically, if an authenticated attacker sends an EXAMINE command with a malformed mailbox name of 25...

Ipswitch IMail < 8.15 Hotfix 1 IMAP EXAMINE Argument Buffer Overflow

Binary data 2695.prm...

CVE-2004-1520

Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command...

CVE-2004-2422

Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service crash via 1 a long sender field to the Queue Manager or 2 a long To field to the Web Messaging component...

CVE-2004-1520

Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command...

CVE-2004-2401

Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML message with long "tag text."...

CVE-2004-2423

Unknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13 allows remote attackers to cause a denial of service crash via "specific content."...

CVE-2004-0297

Buffer overflow in the Lightweight Directory Access Protocol LDAP daemon iLDAP.exe 3.9.15.10 in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service crash and execute arbitrary code via an LDAP message with a large tag length...

Ipswitch IMail Server < 8.14.0 Delete Command Buffer Overflow

Binary data 2408.prm...

IPSwitch-IMail-8.13-DELETE.pl

!/usr/bin/perl -w IPSwitch-IMail-8.13-DELETE Discovered by : Muts Coded by : Zatlander WWW.WHITEHAT.CO.IL Plain vanilla stack overflow in the DELETE command Restrictions: - Need valid authentication credentials - Input buffer only allows characters between x20 - x7e Credits: -...