CVE-2007-2795 | BDVDB-2026-34480 Detail

Description#

Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in IMailsec.dll, which triggers heap corruption in the IMail Server, or (2) a long SUBSCRIBE IMAP command, which triggers a stack-based buffer overflow in the IMAP Daemon.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.zerodayinitiative.com/advisories/ZDI-07-042/
http://www.ipswitch.com/support/imail/releases/im200621.asp
http://www.zerodayinitiative.com/advisories/ZDI-07-043/

Exploit#

No public exploit known

History#

Version 12009-01-27Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.