PT-2011-3125 · Ipswitch · Ipswitch Imail

Publicado 2011-03-16 · Atualizado 2017-08-17 · CVE-2011-1430

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ipswitch IMail versions 11.03 and earlier

Description The issue is related to the STARTTLS implementation in the server, which does not properly restrict I/O buffering. This allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place. The attack is referred to as a "plaintext command injection" attack.

Recommendations For Ipswitch IMail versions 11.03 and earlier, consider disabling the STARTTLS implementation until a patch is available to prevent man-in-the-middle attackers from inserting commands into encrypted SMTP sessions. Restrict access to the SMTP server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-1430

Produtos afetados

Ipswitch Imail

Referências · 8

• https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 · Nota
• http://secunia.com/advisories/43676 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-1430 · Nota de Segurança
• http://kb.cert.org/vuls/id/MAPG-8DBRD4 · Nota
• http://kb.cert.org/vuls/id/555316 · Nota
• http://vupen.com/english/advisories/2011/0609 · Aviso do Fabricante
• http://securityfocus.com/bid/46767 · Nota
• http://osvdb.org/71020 · Nota