CVEvulnerability
CVE-2005-2931
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands.
Affected configurations
• ipswitch imail server 8.20
• ipswitch ipswitch collaboration suite 2.0
• ipswitch ipswitch collaboration suite 2.01
References
- http://secunia.com/advisories/17863 secunia.com
- http://securitytracker.com/id?1015317 securitytracker.com
- http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities Patch, Vendor Advisory
- http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp Patch
- http://www.securityfocus.com/bid/15752 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2782 www.vupen.com
- http://secunia.com/advisories/17863 secunia.com
- http://securitytracker.com/id?1015317 securitytracker.com
- http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities Patch, Vendor Advisory
- http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp Patch
- http://www.securityfocus.com/bid/15752 www.securityfocus.com
- http://www.vupen.com/english/advisories/2005/2782 www.vupen.com