Description
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to execute arbitrary code via a long string located after an '@' character and before a ':' character.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 3
- Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow EDB-3264 · remote · Feb 4, 2007 · verified
- Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow (Metasploit) EDB-3265 · remote · Feb 4, 2007 · verified
- Ipswitch IMail Server 2006 / 8.x - 'RCPT' Remote Stack Overflow EDB-2601 · remote · Oct 19, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 21795 third-party-advisory
- 20060907 ZDI-06-028: Ipswitch Collaboration Suite SMTP Server Stack Overflow mailing-list
- 1016804 vdb-entry
- 19885 vdb-entry
- http://www.ipswitch.com/support/imail/releases/im20061.asp
- ipswitch-smtp-daemon-code-execution(28789) vdb-entry
- http://www.ipswitch.com/support/ics/updates/ics20061.asp
- http://www.zerodayinitiative.com/advisories/ZDI-06-028.html
- 1016803 vdb-entry
- ADV-2006-3496 vdb-entry