Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Ipswitch IMail Server < 11.02 Multiple Vulnerabilities

Critical

Synopsis

The remote mail server is vulnerable to multiple attack vectors.

Description

The remote host is running Ipswitch IMail server.

Versions of IMail earlier than 11.02 are potentially affected by multiple vulnerabilities :

- By sending a specially crafted message to imailsrv.exe with multiple 'Reply-To' headers set, it may be possible for a remote unauthenticated attacker to execute arbitrary code on the remote system. (ZDI-10-126)

- By sending a specially crafted message containing '?Q' operator, it may be possible for a remote authenticated attacker to execute arbitrary code on the remote system with SYSTEM privileges. (ZDI-10-127)

- By sending a specially crafted message with an overly long '-NOTIFY' argument, it may be possible for a remote unauthenticated attacker to execute arbitrary code on the remote system. (ZDI-10-128)

Solution

Upgrade to Ipswitch IMail Server version 11.02 or later.