|
|
Family: Gain root remotely --> Category: infos
Ipswitch IMAP FETCH Command Buffer Overflow Vulnerability Vulnerability Scan
Vulnerability Scan Summary
Checks version of Ipswitch IMAP server
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote IMAP server is affected by a buffer overflow vulnerability.
Description :
The remote host is running Ipswitch Collaboration Suite / IMail Secure
Server / IMail Server, commercial messaging and collaboration suites
for Windows.
According to its banner, the version of Ipswitch Collaboration Suite /
IMail Secure Server / IMail Server installed on the remote host has a
buffer overflow issue in its IMAP server component. Using a
specially-crafted FETCH command with excessive data, an authenticated
attacker can crash the IMAP server on the affected host, thereby
denying service to legitimate users, and possibly execute arbitrary
code as LOCAL SYSTEM.
See also :
http://www.zerodayinitiative.com/advisories/ZDI-06-003.html
http://www.ipswitch.com/support/ics/updates/ics200603prem.asp
http://www.ipswitch.com/support/ics/updates/ics200603stan.asp
http://www.ipswitch.com/support/imail/releases/imsec200603.asp
http://www.ipswitch.com/support/imail/releases/im200603.asp
Solution :
Upgrade to version 2006.03 of the appropriate application.
Threat Level:
Medium / CVSS Base Score : 4.2
(AV:R/AC:L/Au:R/C:P/I:P/A:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|
