IMAP: IPSwitch IMAP Server FETCH Overflow

This signature detects attempts to exploit a known vulnerability in the Ipswitch IMail server. Due to insufficient validation checks in the processing of the IMAP FETCH command, an authenticated remote attacker can exploit this vulnerability and cause a buffer overflow; thereby allowing the attacker to cause a denial-of-service condition or execute arbitrary code in the context of the vulnerable service.

Extended Description

Ipswitch IMail Server / Collaboration Suite are prone to a remote buffer-overflow vulnerability. The vulnerability presents itself when the server handles a specially crafted IMAP FETCH command. This may result in memory corruption leading to a denial-of-service condition or arbitrary code execution.

Affected Products

Ipswitch ipswitch_collaboration_suite_standard_edition

References

BugTraq: 17063

CVE: CVE-2005-3526

URL: http://securitytracker.com/id?1015759

Short Name

IMAP:IPSWITCH:FETCH-OF

Severity

Major

Recommended

False

Recommended Action

Drop

IMAP: IPSwitch IMAP Server FETCH Overflow

Extended Description

Affected Products

References

Found a potential security threat?