PT-2005-3774 · Ipswitch · Ipswitch Collaboration Suite (Ics) Imail Server

Published 2005-12-07 · Updated 2011-03-08 · CVE-2005-2923

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Ipswitch Collaboration Suite (ICS) IMail Server version 8.20

Description The issue allows remote attackers to cause a denial of service (crash) via a long argument to the "LIST command", which causes IMail Server to reference invalid memory.

Recommendations For Ipswitch Collaboration Suite (ICS) IMail Server version 8.20, update to Ipswitch Collaboration Suite (ICS) version 2.02 or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2005-2923

Affected Products

Ipswitch Collaboration Suite (Ics) Imail Server

References · 7

• http://idefense.com/application/poi/display?id=347&type=vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2923 · Security Note
• http://vupen.com/english/advisories/2005/2782 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2923 · Note
• http://securitytracker.com/id?1015318 · Note
• http://secunia.com/advisories/17863 · Note
• http://securityfocus.com/bid/15753 · Note