ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability

ZDI-10-128: Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-128 July 15, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Ipswitch -- Affected Products: Ipswitch IMail -- TippingPointTM IPS Custom...

Ipswitch Imail Server Queuemgr Format String Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IPSwitch IMail. Authentication is not required to exploit this vulnerability. The specific flaw exists within SMTPDLL.dll called by queuemgr.exe. When handling a message queued for remote delivery...