PT-2007-5145 · Ipswitch · Ipswitch Imail Server

Publicado 2007-07-21 · Atualizado 2017-07-29 · CVE-2007-3925

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Ipswitch IMail Server 2006 versions prior to 2006.21

Description: The issue concerns multiple buffer overflows in the IMAP service, specifically in the imapd32.exe component. These overflows can be triggered by remote authenticated users through the Search or Search Charset command, potentially allowing the execution of arbitrary code.

Recommendations: For Ipswitch IMail Server 2006 versions prior to 2006.21, update to version 2006.21 or later to resolve the issue. As a temporary workaround, consider restricting access to the IMAP service until the update can be applied.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-3925

Produtos afetados

Ipswitch Imail Server

Referências · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/ipswitch_search.rb · Exploit
• 🔥 https://exploit-db.com/exploits/4223 · Exploit
• 🔥 https://exploit-db.com/exploits/16487 · Exploit
• http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease · Correção
• http://securityfocus.com/bid/24962 · Correção
• http://vupen.com/english/advisories/2007/2574 · Nota
• http://secunia.com/advisories/26123 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35500 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35496 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3925 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3925 · Nota
• http://securitytracker.com/id?1018419 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=563 · Nota