CVE-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-12-07

Last modified

2024-08-07

Affected products

• Imail Server (Ipswitch)
• Ipswitch Collaboration Suite (Ipswitch)

References

• http://secunia.com/advisories/17863
• http://securitytracker.com/id?1015317
• http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities
• http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp
• http://www.securityfocus.com/bid/15752
• http://www.vupen.com/english/advisories/2005/2782