Signature Detail
Short Name |
SMTP:FROM-FIELD-FS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
SMTP |
Keywords |
From Field Format String Vulnerability |
Release Date |
2010/09/28 |
Update Number |
1780 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMTP: From Field Format String Vulnerability
This signature detects attempts to exploit a known vulnerability against multiple SMTP servers. A successful attack can lead to arbitrary code execution.
Extended Description
Ipswitch Collaboration Suite and IMail Server are susceptible to a remote format string vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in a format-specifier argument to a formatted printing function. This issue allows remote attackers to execute arbitrary machine code in the context of the affected application.
Affected Products
- Ipswitch IMail 8.20.0
- Ipswitch Ipswitch Collaboration Suite 2.0.0 1
- Ipswitch Ipswitch Collaboration Suite
References
- BugTraq: 15752
- CVE: CVE-2005-2931