PT-2006-4427 · Ipswitch · Starengine+2

Published 2006-07-13 · Updated 2011-03-08 · CVE-2006-3552

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ipswitch IMail Secure Server 2006 (affected versions not specified) Ipswitch Collaboration Suite 2006 Premium (affected versions not specified)

Description The issue is related to the Premium Anti-Spam feature in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium. When using a certain .dat file in the StarEngine /data directory from 20060630 or earlier, the software does not properly receive and implement bullet signature updates. This allows attackers to use the server for spam transmission.

Recommendations For Ipswitch IMail Secure Server 2006, update the .dat file in the StarEngine /data directory to a version later than 20060630. For Ipswitch Collaboration Suite 2006 Premium, update the .dat file in the StarEngine /data directory to a version later than 20060630.

Fix

Related Identifiers

CVE-2006-3552

Affected Products

Ipswitch Collaboration Suite

Ipswitch Imail Secure Server

Starengine

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-3552 · Security Note
• http://securitytracker.com/id?1016419 · Note
• http://vupen.com/english/advisories/2006/2653 · Note
• http://securitytracker.com/id?1016420 · Note
• http://ipswitch.com/support/imail/releases/security_advisory_20060630.asp · Note
• http://ipswitch.com/support/ics/updates/security_advisory_20060630.asp · Note