PT-2007-5147 · Ipswitch · Ipswitch Imail Server

Published 2007-07-21 · Updated 2017-07-29 · CVE-2007-3927

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Ipswitch IMail Server 2006 versions prior to 2006.21

Description: The issue involves multiple buffer overflows that can be exploited by remote attackers to execute arbitrary code. This is achieved through unspecified vectors in Imailsec. Additionally, there is an unspecified vector related to "subscribe" that can have an unknown impact.

Recommendations: For Ipswitch IMail Server 2006 versions prior to 2006.21, update to version 2006.21 or later to resolve the issue. As a temporary workaround, consider restricting access to the Imailsec component and limiting the use of the "subscribe" functionality until the update is applied.

Exploit

Fix

Related Identifiers

CVE-2007-3927

Affected Products

Ipswitch Imail Server

References · 12

• 🔥 https://exploit-db.com/exploits/4228 · Exploit
• http://securityfocus.com/bid/24962 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-3927 · Security Note
• http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease · Patch
• http://securitytracker.com/id?1018421 · Note
• http://vupen.com/english/advisories/2007/2574 · Note
• http://osvdb.org/45819 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35505 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3927 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35504 · Note
• http://secunia.com/advisories/26123 · Note
• http://osvdb.org/45818 · Note