PT-2005-3025 · Ia · Ia Emailserver Corporate Edition

Reed Arvin · Published 2005-06-30 · Updated 2017-07-11 · CVE-2005-2083

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: IA eMailServer Corporate Edition version 5.2.2 build 1051

Description: The issue is related to a format string vulnerability in the IMAP4 component. This vulnerability can be exploited by remote attackers to cause a denial of service, resulting in an application crash. The exploitation is possible via a LIST command with format string specifiers as the second argument.

Recommendations: For IA eMailServer Corporate Edition version 5.2.2 build 1051, consider restricting access to the IMAP4 component until a fix is available, or avoid using format string specifiers in the LIST command to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-2083

Affected Products

Ia Emailserver Corporate Edition

References · 5

• 🔥 https://exploit-db.com/exploits/1163 · Exploit
• http://securitytracker.com/alerts/2005/Jun/1014301.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-2083 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21169 · Note
• http://marc.info/?l=bugtraq&m=111988945819448&w=2 · Note