SMTP: Relay E-Mail Address Overflow

This signature detects buffer overflow condition in relay e-mail addresses in an SMTP transmission. The address may be improperly formated, or it may contain binary data or invalid characters. A successful attack can result in malicious code execution.

Extended Description

Ipswitch IMail Server and Collaboration Suite are prone to a stack-overflow vulnerability. Updates are available. This vulnerability may lead to remote arbitrary code execution or denial-of-service conditions. Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure are vulnerable.

Affected Products

Ipswitch imail_plus

References

BugTraq: 19885

CVE: CVE-2006-4379

URL: http://www.milw0rm.com/exploits/2601 http://www.ipswitch.com/support/imail/releases/im20061.asp http://www.zerodayinitiative.com/advisories/zdi-06-028.html

Short Name

SMTP:EMAIL:RELAY-ADDR-OF

Severity

Major

Recommended

False

Recommended Action

Drop

SMTP: Relay E-Mail Address Overflow

Extended Description

Affected Products

References

Found a potential security threat?