CVE-2007-5094 Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages wit...
HighCVSS 7.5
EPSS 4.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by itself on a line in the header, and a long Content-Transfer-Encoding header line.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch imail | = 8.0.3 | No fix listed |
| ipswitch imail | = 8.0.5 | No fix listed |
| ipswitch imail | = 8.1 | No fix listed |
| ipswitch imail | = 8.01 | No fix listed |
| ipswitch imail | = 8.11 | No fix listed |
References
- 39390 vdb-entry
- pstgroup.blogspot.com
- 25762 exploit vdb-entry
- ipswitch-imail-bo(36723) vdb-entry
- 4438 exploit