Signature Detail

IMAP: IPSwitch IMAP Server FETCH Overflow

This signature detects attempts to exploit a known vulnerability in the Ipswitch IMail server. Due to insufficient validation checks in the processing of the IMAP FETCH command, an authenticated remote attacker can exploit this vulnerability and cause a buffer overflow; thereby allowing the attacker to cause a denial-of-service condition or execute arbitrary code in the context of the vulnerable service.

Extended Description

Ipswitch IMail Server / Collaboration Suite are prone to a remote buffer-overflow vulnerability. The vulnerability presents itself when the server handles a specially crafted IMAP FETCH command. This may result in memory corruption leading to a denial-of-service condition or arbitrary code execution.

Affected Products

• Ipswitch IMail Secure Server 2006
• Ipswitch IMail Server 2006
• Ipswitch Ipswitch Collaboration Suite Premium Edition 2006
• Ipswitch Ipswitch Collaboration Suite Standard Edition 2006

References

• BugTraq: 17063
• CVE: CVE-2005-3526
• URL: http://securitytracker.com/id?1015759