CVE-2006-4379

Related Files

Zero Day Initiative Advisory 06-028

Posted Sep 8, 2006

Authored by Tipping Point | Site zerodayinitiative.com

A vulnerability in ICS/IMail Server 2006 allows remote attackers to execute arbitrary code on vulnerable installations of the Ipswitch Collaboration Suite and IMail. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SMTP daemon. A lack of bounds checking during the parsing of long strings contained within the characters '@' and ':' leads to a stack overflow vulnerability. Exploitation can result in code execution or a denial of service.

tags | advisory, remote, denial of service, overflow, arbitrary, code execution

advisories | CVE-2006-4379

SHA-256 | b607965f5993385e1d37acb1d22cb4ce8d3c9e08e51d136f41a523133b516b14

Download | Favorite | View