36222 : Ipswitch IMail IMAP SUBSCRIBE Command Overflow
Printer | http://osvdb.org/36222 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
10	1003	almost 6 years ago	over 2 years ago	7 times	100%

Timeline

Disclosure Date
2007-03-09

Description

The IMail Server and Ipswitch Collaboration suite contain flaw in the 'SUBSCRIBE' command of the IMAP daemon running listening on port 143 that allows attackers to execute arbitrary code. Attackers once authenticated can pass a long string to the command thereby causing a exploitable stack-based overflow.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Confidentiality, Loss of Integrity, Loss of Availability
Exploit: Exploit Private, Exploit Commercial
Disclosure: Vendor Verified, Vendor Verified, Coordinated Disclosure

Solution

The vendor released an upgrade to fix the vulnerabilities: IMail Server 2006.21 and Collaboration Suite 2006.21

Products

Ipswitch, Inc.	IMail
Ipswitch, Inc.	Collaboration Suite

References

CVE ID: 2007-2795 (see also: NVD)
Secunia Advisory ID: 26123
Related OSVDB ID: 36219 36220 36221
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-07/0278.html
Vendor Specific News/Changelog Entry: http://www.ipswitch.com/support/ics/updates/ics200621.asp
http://www.ipswitch.com/support/imail/releases/im200621.asp
Generic Exploit URL: http://www.saintcorporation.com/cgi-bin/exploit_info/imail_imap_subscribe
Other Advisory URL: http://www.zerodayinitiative.com/advisories/ZDI-07-042/
http://www.zerodayinitiative.com/advisories/ZDI-07-043.html
http://www.zerodayinitiative.com/advisories/ZDI-07-043/

Tools & Filters

Snort	1842

Credit

Sebastian Apelt - Zero Day Initiative (ZDI)

CVSSv2 Score

CVSSv2 Base Score = 9.0
Source: nvd.nist.gov | Generated: 2009-01-28 | Disagree?

Comments

Add Comment Hide Add Comment

No Comments.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.