CVE-2007-3925
Summary
| CVE | CVE-2007-3925 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-07-21 00:30:00 UTC |
| Updated | 2017-07-29 01:32:00 UTC |
| Description | Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command. |
Risk And Classification
Problem Types: CWE-119
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ipswitch | Imail Server | All | All | All | All |
| Application | Ipswitch | Ipswitch Collaboration Suite | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IMail Server Buffer Overflows in IMAP 'search' and 'search charset' Commands Let Remote Authenticated Users Execute Arbitrary Code - SecurityTracker | SECTRACK | www.securitytracker.com | |
| Ipswitch IMail Server/Collaboration Suite Multiple Buffer Overflows - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| 20070718 Ipswitch IMail Server 2006 IMAP Search Command Buffer Overflow Vulnerability | IDEFENSE | labs.idefense.com | |
| Ipswitch IMail Release Notes | CONFIRM | docs.ipswitch.com | Patch |
| Ipswitch IMail Server Multiple Buffer Overflow Vulnerabilities | BID | www.securityfocus.com | Patch |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.