PT-2011-3125 · Ipswitch · Ipswitch Imail

Published 2011-03-16 · Updated 2017-08-17 · CVE-2011-1430

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ipswitch IMail versions 11.03 and earlier

Description The issue is related to the STARTTLS implementation in the server, which does not properly restrict I/O buffering. This allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place. The attack is referred to as a "plaintext command injection" attack.

Recommendations For Ipswitch IMail versions 11.03 and earlier, consider disabling the STARTTLS implementation until a patch is available to prevent man-in-the-middle attackers from inserting commands into encrypted SMTP sessions. Restrict access to the SMTP server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-1430

Affected Products

Ipswitch Imail

References · 8

• http://secunia.com/advisories/43676 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1430 · Security Note
• http://vupen.com/english/advisories/2011/0609 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65932 · Note
• http://kb.cert.org/vuls/id/MAPG-8DBRD4 · Note
• http://kb.cert.org/vuls/id/555316 · Note
• http://securityfocus.com/bid/46767 · Note
• http://osvdb.org/71020 · Note