Ipswitch IMail Server < 11.02 Multiple Vulnerabilities
Critical Nessus Network Monitor Plugin ID 5600
Synopsis
The remote mail server is vulnerable to multiple attack vectors.
Description
The remote host is running Ipswitch IMail server.
Versions of IMail earlier than 11.02 are potentially affected by multiple vulnerabilities :
- By sending a specially crafted message to imailsrv.exe with multiple 'Reply-To' headers set, it may be possible for a remote unauthenticated attacker to execute arbitrary code on the remote system. (ZDI-10-126)
- By sending a specially crafted message containing '?Q' operator, it may be possible for a remote authenticated attacker to execute arbitrary code on the remote system with SYSTEM privileges. (ZDI-10-127)
- By sending a specially crafted message with an overly long '-NOTIFY' argument, it may be possible for a remote unauthenticated attacker to execute arbitrary code on the remote system. (ZDI-10-128)
Solution
Upgrade to Ipswitch IMail Server version 11.02 or later.