CVE-2005-2931 Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to...
HighCVSS 7.5
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch imail server | = 8.20 | No fix listed |
| ipswitch collaboration suite | = 2.0 | No fix listed |
| ipswitch collaboration suite | = 2.01 | No fix listed |
References
- 17863 third-party-advisory
- 1015317 vdb-entry
- 20051206 Ipswitch Collaboration Suite SMTP Format String Vulnerability patch third-party-advisory vendor-advisory
- www.ipswitch.com patch
- 15752 vdb-entry
- ADV-2005-2782 vdb-entry