CVE-2007-3925

Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=563
http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease	Patch
http://www.securityfocus.com/bid/24962	Patch
http://www.securitytracker.com/id?1018419
http://secunia.com/advisories/26123	Vendor Advisory
http://www.vupen.com/english/advisories/2007/2574
https://exchange.xforce.ibmcloud.com/vulnerabilities/35500
https://exchange.xforce.ibmcloud.com/vulnerabilities/35496

Configuration 1

cpe:2.3:a:ipswitch:imail_server:*:*:*:*:*:*:*:* cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:*:*:*:*:*:*:*:*

---

Published : 2007-07-21 12:30

Updated : 2017-07-29 01:32

---

NVD link : CVE-2007-3925

Mitre link : CVE-2007-3925

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer