CVE-2004-1520 Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command.

MediumCVSS 4.6 EPSS 88.5% Framework module Public exploit

Description

Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command.

Product	Affected versions	Fixed in
ipswitch imail	= 8.13	No fix listed

4.6 Medium

AV:L/AC:L/Au:N/C:P/I:P/A:P

Metadata only. CVERadar never hosts or runs exploit code.

Mdaemon 8.0.3 IMAPD CRAM-MD5 Authentication Overflow Framework module · Metasploit Framework (Rapid7) · 2004-11-12
IMail IMAP4D Delete Overflow Framework module · Metasploit Framework (Rapid7) · 2004-11-12
MDaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow (Metasploit) Exploit · Exploit Database (OffSec) · 2005-08-12
IPSwitch IMail IMAP4D - Delete Overflow (Metasploit) Exploit · Exploit Database (OffSec) · 2010-09-20
IPSwitch IMail 8.13 - 'DELETE' Remote Stack Overflow Exploit · Exploit Database (OffSec) · 2004-11-12