PT-2007-5145 · Ipswitch · Ipswitch Imail Server

Published 2007-07-21 · Updated 2017-07-29 · CVE-2007-3925

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Ipswitch IMail Server 2006 versions prior to 2006.21

Description: The issue concerns multiple buffer overflows in the IMAP service, specifically in the imapd32.exe component. These overflows can be triggered by remote authenticated users through the Search or Search Charset command, potentially allowing the execution of arbitrary code.

Recommendations: For Ipswitch IMail Server 2006 versions prior to 2006.21, update to version 2006.21 or later to resolve the issue. As a temporary workaround, consider restricting access to the IMAP service until the update can be applied.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-3925

Affected Products

Ipswitch Imail Server

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/ipswitch_search.rb · Exploit
• 🔥 https://exploit-db.com/exploits/4223 · Exploit
• 🔥 https://exploit-db.com/exploits/16487 · Exploit
• http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease · Patch
• http://securityfocus.com/bid/24962 · Patch
• http://secunia.com/advisories/26123 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3925 · Security Note
• http://vupen.com/english/advisories/2007/2574 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35500 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35496 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3925 · Note
• http://securitytracker.com/id?1018419 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=563 · Note