Description
Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field.
References
- http://aluigi.altervista.org/adv/ipsimene-adv.txt
- 20080207 Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1 mailing-list
- 27677 vdb-entry
- 3697 third-party-advisory
- http://aluigi.org/poc/ipsimene.zip
- 28824 third-party-advisory