CVE-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities	Patch Vendor Advisory
http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp	Patch
http://www.securityfocus.com/bid/15752
http://secunia.com/advisories/17863
http://securitytracker.com/id?1015317
http://www.vupen.com/english/advisories/2005/2782

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ipswitch:imail_server:8.20:::::::*
	cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.0:::::::*
	cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.01:::::::*

Information

Published : 2005-12-06 17:03

Updated : 2011-03-07 18:25

NVD link : CVE-2005-2931

Mitre link : CVE-2005-2931

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

ipswitch

ipswitch_collaboration_suite
imail_server

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities", "name": "20051206 Ipswitch Collaboration Suite SMTP Format String Vulnerability", "tags": ["Patch", "Vendor Advisory"], "refsource": "IDEFENSE"}, {"url": "http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp", "name": "http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp", "tags": ["Patch"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/15752", "name": "15752", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/advisories/17863", "name": "17863", "tags": [], "refsource": "SECUNIA"}, {"url": "http://securitytracker.com/id?1015317", "name": "1015317", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.vupen.com/english/advisories/2005/2782", "name": "ADV-2005-2782", "tags": [], "refsource": "VUPEN"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2005-2931", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2005-12-07T01:03Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ipswitch:imail_server:8.20:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ipswitch:ipswitch_collaboration_suite:2.01:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2011-03-08T02:25Z"}