Unscored severity · published Dec 7, 2005
CVE-2005-2931
Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format…
–
CVSS
4.7%
EPSS
No
On KEV
Description
Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
Imail Server · Ipswitch
8.20 · source: NVD
IC
Ipswitch Collaboration Suite · Ipswitch
2.0; 2.01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2931
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2931
secunia.com
http://secunia.com/advisories/17863
securitytracker.com
http://securitytracker.com/id?1015317
Patch
http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities
Patch
http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp
www.securityfocus.com
http://www.securityfocus.com/bid/15752
www.vupen.com
http://www.vupen.com/english/advisories/2005/2782
More from Imail Server
9.8
CVE-2017-12639
Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETRE or…
9.8
CVE-2017-12638
Stack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote attackers to execute arbitrary code via unspecified vectors in IMmailSrv, aka ETBL or…
–
CVE-2014-3878
Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before 12.4.1.15, allow remote attackers to inject…
–
CVE-2007-4345
Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart…
–
CVE-2007-3926
Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving an "overwritten destructor."