CVSS: 10.0EPSS: 93%CPEs: 2EXPL: 3CVE-2004-0297 – IPSwitch IMail LDAP Daemon/Service - Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2004-0297
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length. Desbordamiento de búfer en el demonio Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) de Ipswitch IMail Server 8.03 permite a atacantes remotos causar una denegación de servicio (caída) y ejecutar código de su elección mediante un mensaje LDAP con una etiqueta de longitud larga. • https://www.exploit-db.com/exploits/157 https://www.exploit-db.com/exploits/16824 http://www.idefense.com/application/poi/display?id=74 http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html http://www.kb.cert.org/vuls/id/972334 http://www.osvdb.org/3984 http://www.securityfocus.com/bid/9682 https://exchange.xforce.ibmcloud.com/vulnerabilities/15243 •
CVSS: 7.5EPSS: 9%CPEs: 12EXPL: 2CVE-2002-1076 – IPSwitch IMail 6.x/7.0/7.1 - Web Messaging GET Buffer Overflow
https://notcve.org/view.php?id=CVE-2002-1076
Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0. • https://www.exploit-db.com/exploits/21654 http://archives.neohapsis.com/archives/bugtraq/2002-07/0326.html http://archives.neohapsis.com/archives/bugtraq/2002-07/0363.html http://archives.neohapsis.com/archives/bugtraq/2002-07/0368.html http://support.ipswitch.com/kb/IM-20020729-DM01.htm http://support.ipswitch.com/kb/IM-20020731-DM02.htm http://www.iss.net/security_center/static/9679.php http://www.securityfocus.com/bid/5323 •
CVSS: 5.0EPSS: 1%CPEs: 12EXPL: 2CVE-2002-1077 – IPSwitch IMail 6.x/7.0.x - Web Calendaring Incomplete Post Denial of Service
https://notcve.org/view.php?id=CVE-2002-1077
IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field. • https://www.exploit-db.com/exploits/21673 http://archives.neohapsis.com/archives/bugtraq/2002-07/0399.html http://www.iss.net/security_center/static/9722.php http://www.securityfocus.com/bid/5365 •
CVSS: 10.0EPSS: 6%CPEs: 24EXPL: 0CVE-2002-0777
https://notcve.org/view.php?id=CVE-2002-0777
Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter. • http://archives.neohapsis.com/archives/bugtraq/2002-05/0172.html http://www.iss.net/security_center/static/9116.php http://www.securityfocus.com/bid/4780 •
CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0CVE-2001-1211
https://notcve.org/view.php?id=CVE-2001-1211
Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain. Ipswitch IMail 7.0.4 y versiones anteriores permiten a atacantes con privilegios de administrador, leer y modificar los alias de los usuarios y la información de las listas de correo de otros dominios albergados en el mismo servidor mediante:(1) aliasadmin o(2) programas CGI listadm1, los cuales no verifica adecuadamente que un administrador realmente lo es en ese dominio. • http://support.ipswitch.com/kb/IM-20011219-DM01.htm http://support.ipswitch.com/kb/IM-20020301-DM02.htm http://www.iss.net/security_center/static/7752.php http://www.securityfocus.com/archive/1/247786 http://www.securityfocus.com/bid/3766 •