PT-2006-4427 · Ipswitch · Starengine+2

Publicado 2006-07-13 · Atualizado 2011-03-08 · CVE-2006-3552

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ipswitch IMail Secure Server 2006 (affected versions not specified) Ipswitch Collaboration Suite 2006 Premium (affected versions not specified)

Description The issue is related to the Premium Anti-Spam feature in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium. When using a certain .dat file in the StarEngine /data directory from 20060630 or earlier, the software does not properly receive and implement bullet signature updates. This allows attackers to use the server for spam transmission.

Recommendations For Ipswitch IMail Secure Server 2006, update the .dat file in the StarEngine /data directory to a version later than 20060630. For Ipswitch Collaboration Suite 2006 Premium, update the .dat file in the StarEngine /data directory to a version later than 20060630.

Correção

Identificadores relacionados

CVE-2006-3552

Produtos afetados

Ipswitch Collaboration Suite

Ipswitch Imail Secure Server

Starengine

Referências · 6

• http://securitytracker.com/id?1016419 · Nota
• http://vupen.com/english/advisories/2006/2653 · Nota
• http://securitytracker.com/id?1016420 · Nota
• http://ipswitch.com/support/imail/releases/security_advisory_20060630.asp · Nota
• http://ipswitch.com/support/ics/updates/security_advisory_20060630.asp · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3552 · Nota de Segurança