Unscored severity · published Sep 8, 2006
CVE-2006-4379
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to…
–
CVSS
60.9%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to execute arbitrary code via a long string located after an '@' character and before a ':' character.
Exploitation
Is it being used?
Exploit prediction (EPSS)60.9% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Imail Plus · Ipswitch
2006 · source: NVD
IS
Imail Secure Server · Ipswitch
2006 · source: NVD
IC
Ipswitch Collaboration Suite · Ipswitch
2006_premium; 2006_standard · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4379
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4379
Vendor Advisory
http://secunia.com/advisories/21795
securitytracker.com
http://securitytracker.com/id?1016803
securitytracker.com
http://securitytracker.com/id?1016804
Patch
http://www.ipswitch.com/support/ics/updates/ics20061.asp
www.ipswitch.com
http://www.ipswitch.com/support/imail/releases/im20061.asp
www.securityfocus.com
http://www.securityfocus.com/archive/1/445521/100/0/threaded
More from Imail Plus
–
CVE-2007-1637
Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1)…