CVEvulnerability
CVE-2005-1255
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-05-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with (1) a long username argument or (2) a long username argument that begins with a special character.
Affected configurations
• ipswitch imail 8.12
• ipswitch imail 8.13
• ipswitch imail server (<= 8.2 hotfix 2)
• ipswitch ipswitch collaboration suite
References
- http://securitytracker.com/id?1014047 securitytracker.com
- http://www.idefense.com/application/poi/display?id=243&type=vulnerabilities Vendor Advisory
- http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html Patch
- http://www.securityfocus.com/bid/13727 www.securityfocus.com
- http://securitytracker.com/id?1014047 securitytracker.com
- http://www.idefense.com/application/poi/display?id=243&type=vulnerabilities Vendor Advisory
- http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html Patch
- http://www.securityfocus.com/bid/13727 www.securityfocus.com