Info

Disclosure

Sep 03, 2004

Discovery

Unknown

Dates

Exploit

Sep 03, 2004

Solution

Unknown

Description

Ipswitch IMail contains a flaw withing the web messaging functionality that may allow a remote denial of service. The issue is triggered when a a user creates a specially crafted email with an overly long 'To:' field, and will result in loss of availability for the server.

Classification

Location: Remote / Network Access
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Public

Solution

Upgrade to version 8.13 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Ipswitch, Inc.	IMail	8.12
		8.11
		8.0
		8.1
		8.1HF1
		8.1HF2

References

Security Tracker: 1011146
Bugtraq ID: 11106
Secunia Advisory ID: 12453
ISS X-Force ID: 17219
CVE ID: 2004-2422 (see also: NVD)
Related OSVDB ID: 9552 9553
Other Advisory URL: http://support.ipswitch.com/kb/IM-20040902-DM01.htm
Vendor URL: http://www.ipswitch.com/
Vendor Specific Solution URL: http://www.ipswitch.com/support/imail/releases/imail_professional/im813.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/9554

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Ipswitch, Inc.

IMail

References

Credit